# CVEs published 2020-04-15

512 CVEs were published on April 15, 2020: 25 critical, 149 high. 6 are now in CISA KEV. Days are UTC.

- [CVE-2020-7486](https://cve.now/CVE-2020-7486.md): \*\*VERSION NOT SUPPORTED WHEN ASSIGNED\*\* A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in (no CVSS, Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B)
- [CVE-2020-7485](https://cve.now/CVE-2020-7485.md): \*\*VERSION NOT SUPPORTED WHEN ASSIGNED\*\* A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper (no CVSS, TriStation TS1131)
- [CVE-2020-7484](https://cve.now/CVE-2020-7484.md): \*\*VERSION NOT SUPPORTED WHEN ASSIGNED\*\* A vulnerability with the former 'password' feature could allow a denial of service attack if the use (no CVSS, TriStation TS1131)
- [CVE-2020-7483](https://cve.now/CVE-2020-7483.md): \*\*VERSION NOT SUPPORTED WHEN ASSIGNED\*\* A vulnerability could cause certain data to be visible on the network when the 'password' feature is (no CVSS, TriStation TS1131)
- [CVE-2020-5721](https://cve.now/CVE-2020-5721.md): MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field (no CVSS, MikroTik WinBox)
- [CVE-2020-11660](https://cve.now/CVE-2020-11660.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive informat (no CVSS, CA API Developer Portal)
- [CVE-2020-11659](https://cve.now/CVE-2020-11659.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administ (no CVSS, CA API Developer Portal)
- [CVE-2020-11658](https://cve.now/CVE-2020-11658.md): CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization. (no CVSS, CA API Developer Portal)
- [CVE-2020-1632](https://cve.now/CVE-2020-1632.md): Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate. (CVSS 8.6, Juniper Networks Junos OS)
- [CVE-2020-9280](https://cve.now/CVE-2020-9280.md): In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" fol (no CVSS, silverstripe/framework · silverstripe/userforms +1)
- [CVE-2020-3273](https://cve.now/CVE-2020-3273.md): Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability (CVSS 8.6, Cisco Wireless LAN Controller)
- [CVE-2020-3262](https://cve.now/CVE-2020-3262.md): Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability (CVSS 8.6, Cisco Aironet Access Point Software)
- [CVE-2020-3261](https://cve.now/CVE-2020-3261.md): Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability (CVSS 8.1, Cisco Mobility Express)
- [CVE-2020-3260](https://cve.now/CVE-2020-3260.md): Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2020-3252](https://cve.now/CVE-2020-3252.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3251](https://cve.now/CVE-2020-3251.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3250](https://cve.now/CVE-2020-3250.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3249](https://cve.now/CVE-2020-3249.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3248](https://cve.now/CVE-2020-3248.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3247](https://cve.now/CVE-2020-3247.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3243](https://cve.now/CVE-2020-3243.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3240](https://cve.now/CVE-2020-3240.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3239](https://cve.now/CVE-2020-3239.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3194](https://cve.now/CVE-2020-3194.md): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability (CVSS 7.8, Cisco Webex Meetings)
- [CVE-2020-3177](https://cve.now/CVE-2020-3177.md): Cisco Unified Communications Manager Path Traversal Vulnerability (CVSS 7.5, Cisco Unified Communications Manager)
- [CVE-2020-3162](https://cve.now/CVE-2020-3162.md): Cisco IoT Field Network Director Denial of Service Vulnerability (CVSS 7.5, Cisco IoT Field Network Director)
- [CVE-2020-3161](https://cve.now/CVE-2020-3161.md): Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability (CVSS 9.8, KEV, Cisco IP phone)
- [CVE-2019-20681](https://cve.now/CVE-2019-20681.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 7.1)
- [CVE-2019-20680](https://cve.now/CVE-2019-20680.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 7.0)
- [CVE-2019-20679](https://cve.now/CVE-2019-20679.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. (CVSS 7.3)
- [CVE-2019-20678](https://cve.now/CVE-2019-20678.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-10951](https://cve.now/CVE-2020-10951.md): Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. (no CVSS)
- [CVE-2019-12519](https://cve.now/CVE-2019-12519.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20677](https://cve.now/CVE-2019-20677.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-12520](https://cve.now/CVE-2019-12520.md): An issue was discovered in Squid through 4.7 and 5. (no CVSS)
- [CVE-2019-20676](https://cve.now/CVE-2019-20676.md): Certain NETGEAR devices are affected by lack of access control at the function level. (CVSS 6.0)
- [CVE-2019-20675](https://cve.now/CVE-2019-20675.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20674](https://cve.now/CVE-2019-20674.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20673](https://cve.now/CVE-2019-20673.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20672](https://cve.now/CVE-2019-20672.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20671](https://cve.now/CVE-2019-20671.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11663](https://cve.now/CVE-2020-11663.md): CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attack (no CVSS, CA API Developer Portal)
- [CVE-2020-11662](https://cve.now/CVE-2020-11662.md): CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource Shar (no CVSS, CA API Developer Portal)
- [CVE-2020-11661](https://cve.now/CVE-2020-11661.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data. (no CVSS, CA API Developer Portal)
- [CVE-2019-20670](https://cve.now/CVE-2019-20670.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20669](https://cve.now/CVE-2019-20669.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20668](https://cve.now/CVE-2019-20668.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20667](https://cve.now/CVE-2019-20667.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20666](https://cve.now/CVE-2019-20666.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11666](https://cve.now/CVE-2020-11666.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges. (no CVSS, CA API Developer Portal)
- [CVE-2019-20665](https://cve.now/CVE-2019-20665.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11665](https://cve.now/CVE-2020-11665.md): CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open (no CVSS, CA API Developer Portal)
- [CVE-2020-11664](https://cve.now/CVE-2020-11664.md): CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open (no CVSS, CA API Developer Portal)
- [CVE-2019-20664](https://cve.now/CVE-2019-20664.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20663](https://cve.now/CVE-2019-20663.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-12522](https://cve.now/CVE-2019-12522.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20662](https://cve.now/CVE-2019-20662.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20661](https://cve.now/CVE-2019-20661.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20660](https://cve.now/CVE-2019-20660.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20659](https://cve.now/CVE-2019-20659.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.4)
- [CVE-2019-12521](https://cve.now/CVE-2019-12521.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20658](https://cve.now/CVE-2019-20658.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 5.4)
- [CVE-2020-6996](https://cve.now/CVE-2020-6996.md): Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are a (no CVSS, Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstatio…)
- [CVE-2019-20657](https://cve.now/CVE-2019-20657.md): Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. (CVSS 8.0)
- [CVE-2019-20656](https://cve.now/CVE-2019-20656.md): Certain NETGEAR devices are affected by a hardcoded password. (CVSS 6.4)
- [CVE-2019-20655](https://cve.now/CVE-2019-20655.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 7.3)
- [CVE-2019-20654](https://cve.now/CVE-2019-20654.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 4.3)
- [CVE-2019-20653](https://cve.now/CVE-2019-20653.md): Certain NETGEAR devices are affected by denial of service. (CVSS 7.4)
- [CVE-2019-20652](https://cve.now/CVE-2019-20652.md): NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information. (CVSS 7.9)
- [CVE-2019-20651](https://cve.now/CVE-2019-20651.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.1)
- [CVE-2020-10611](https://cve.now/CVE-2020-10611.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary cod (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2019-12524](https://cve.now/CVE-2019-12524.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2020-10613](https://cve.now/CVE-2020-10613.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive in (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2020-10615](https://cve.now/CVE-2020-10615.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-servic (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2020-11799](https://cve.now/CVE-2020-11799.md): Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. (no CVSS)
- [CVE-2020-5350](https://cve.now/CVE-2020-5350.md): Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM componen (CVSS 7.9, Dell Integrated Data Protection Appliance)
- [CVE-2020-5346](https://cve.now/CVE-2020-5346.md): RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. (CVSS 4.8, Dell RSA Authentication Manager)
- [CVE-2019-20650](https://cve.now/CVE-2019-20650.md): Certain NETGEAR devices are affected by denial of service. (CVSS 5.3)
- [CVE-2019-20649](https://cve.now/CVE-2019-20649.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. (CVSS 6.9)
- [CVE-2019-20648](https://cve.now/CVE-2019-20648.md): NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings. (CVSS 4.6)
- [CVE-2019-20647](https://cve.now/CVE-2019-20647.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. (CVSS 6.8)
- [CVE-2019-20646](https://cve.now/CVE-2019-20646.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. (no CVSS)
- [CVE-2020-3953](https://cve.now/CVE-2020-3953.md): Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. (no CVSS, VMware vRealize Log Insight)
- [CVE-2019-20645](https://cve.now/CVE-2019-20645.md): NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. (CVSS 4.2)
- [CVE-2019-20644](https://cve.now/CVE-2019-20644.md): NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. (CVSS 4.2)
- [CVE-2020-3954](https://cve.now/CVE-2020-3954.md): Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. (no CVSS, VMware vRealize Log Insight)
- [CVE-2019-20643](https://cve.now/CVE-2019-20643.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. (CVSS 7.7)
- [CVE-2019-20642](https://cve.now/CVE-2019-20642.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. (CVSS 9.0)
- [CVE-2019-20641](https://cve.now/CVE-2019-20641.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. (CVSS 8.8)
- [CVE-2019-20640](https://cve.now/CVE-2019-20640.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2019-20639](https://cve.now/CVE-2019-20639.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20638](https://cve.now/CVE-2019-20638.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. (CVSS 7.0)
- [CVE-2020-11792](https://cve.now/CVE-2020-11792.md): NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key dis (CVSS 7.5)
- [CVE-2020-11791](https://cve.now/CVE-2020-11791.md): NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. (CVSS 5.2)
- [CVE-2020-11790](https://cve.now/CVE-2020-11790.md): NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers. (CVSS 9.4)
- [CVE-2020-11789](https://cve.now/CVE-2020-11789.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.3)
- [CVE-2020-11788](https://cve.now/CVE-2020-11788.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 6.5)
- [CVE-2020-11787](https://cve.now/CVE-2020-11787.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11786](https://cve.now/CVE-2020-11786.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-0600](https://cve.now/CVE-2020-0600.md): Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege (no CVSS, Intel(R) NUC Firmware)
- [CVE-2020-0598](https://cve.now/CVE-2020-0598.md): Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated u (no CVSS, Intel(R) Binary Configuration Tool for Windows)
- [CVE-2020-0577](https://cve.now/CVE-2020-0577.md): Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable es (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0576](https://cve.now/CVE-2020-0576.md): Buffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of ser (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0578](https://cve.now/CVE-2020-0578.md): Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable es (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0568](https://cve.now/CVE-2020-0568.md): Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable deni (no CVSS, Intel(R) Driver and Support Assistant)
- [CVE-2020-0558](https://cve.now/CVE-2020-0558.md): Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow a (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2020-0557](https://cve.now/CVE-2020-0557.md): Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2020-0547](https://cve.now/CVE-2020-0547.md): Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user (no CVSS, Intel(R) Data Migration Software)
- [CVE-2020-10639](https://cve.now/CVE-2020-10639.md): Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. (no CVSS, Eaton HMiSoft VU3)
- [CVE-2020-10637](https://cve.now/CVE-2020-10637.md): Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. (no CVSS, Eaton HMiSoft VU3)
- [CVE-2020-6992](https://cve.now/CVE-2020-6992.md): A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. (no CVSS, GE Digital CIMPLICITY)
- [CVE-2019-19390](https://cve.now/CVE-2019-19390.md): The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters t (no CVSS)
- [CVE-2020-11785](https://cve.now/CVE-2020-11785.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11784](https://cve.now/CVE-2020-11784.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11728](https://cve.now/CVE-2020-11728.md): An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. (no CVSS)
- [CVE-2020-11729](https://cve.now/CVE-2020-11729.md): An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. (no CVSS)
- [CVE-2020-8948](https://cve.now/CVE-2020-8948.md): The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary fil (no CVSS)
- [CVE-2020-4294](https://cve.now/CVE-2020-4294.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). (CVSS 6.3, IBM Qradar)
- [CVE-2020-4274](https://cve.now/CVE-2020-4274.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permis (CVSS 5.4, IBM QRadar)
- [CVE-2020-4272](https://cve.now/CVE-2020-4272.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. (CVSS 5.5, IBM QRadar)
- [CVE-2020-4271](https://cve.now/CVE-2020-4271.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower p (CVSS 6.3, IBM Qradar)
- [CVE-2020-4270](https://cve.now/CVE-2020-4270.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. (CVSS 8.4, IBM Qradar)
- [CVE-2020-4269](https://cve.now/CVE-2020-4269.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun (CVSS 7.5, IBM Qradar)
- [CVE-2020-4268](https://cve.now/CVE-2020-4268.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Qradar)
- [CVE-2019-4654](https://cve.now/CVE-2019-4654.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a truste (CVSS 3.7, IBM Qradar)
- [CVE-2019-4594](https://cve.now/CVE-2019-4594.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HT (CVSS 5.9, IBM QRadar)
- [CVE-2019-4593](https://cve.now/CVE-2019-4593.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks again (CVSS 4.3, IBM Qradar)
- [CVE-2020-1094](https://cve.now/CVE-2020-1094.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo (no CVSS, Microsoft Windows)
- [CVE-2020-1049](https://cve.now/CVE-2020-1049.md): A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web req (no CVSS, Microsoft Dynamics 365 Server,)
- [CVE-2020-1050](https://cve.now/CVE-2020-1050.md): A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web req (no CVSS, Microsoft Dynamics 365 Server,)
- [CVE-2020-1027](https://cve.now/CVE-2020-1027.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-1029](https://cve.now/CVE-2020-1029.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka (no CVSS, Microsoft Windows)
- [CVE-2020-1022](https://cve.now/CVE-2020-1022.md): A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vu (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2)
- [CVE-2020-1026](https://cve.now/CVE-2020-1026.md): A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’s (no CVSS, Microsoft Research JavaScript Cryptography Library · msrcry…)
- [CVE-2020-1018](https://cve.now/CVE-2020-1018.md): An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +1)
- [CVE-2020-1019](https://cve.now/CVE-2020-1019.md): An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'M (no CVSS, Microsoft RMS Sharing for Mac)
- [CVE-2020-1020](https://cve.now/CVE-2020-1020.md): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially (CVSS 8.8, KEV, Microsoft Windows)
- [CVE-2020-1016](https://cve.now/CVE-2020-1016.md): An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2020-1017](https://cve.now/CVE-2020-1017.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push (no CVSS, Microsoft Windows)
- [CVE-2020-1014](https://cve.now/CVE-2020-1014.md): An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Micr (no CVSS, Microsoft Windows)
- [CVE-2020-1015](https://cve.now/CVE-2020-1015.md): An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows El (no CVSS, Microsoft Windows)
- [CVE-2020-1009](https://cve.now/CVE-2020-1009.md): An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected loca (no CVSS, Microsoft Windows)
- [CVE-2020-1011](https://cve.now/CVE-2020-1011.md): An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows Elev (no CVSS, Microsoft Windows)
- [CVE-2020-1007](https://cve.now/CVE-2020-1007.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2020-1008](https://cve.now/CVE-2020-1008.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-1005](https://cve.now/CVE-2020-1005.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr (no CVSS, Microsoft Windows)
- [CVE-2020-1006](https://cve.now/CVE-2020-1006.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push (no CVSS, Microsoft Windows)
- [CVE-2020-1003](https://cve.now/CVE-2020-1003.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1004](https://cve.now/CVE-2020-1004.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphi (no CVSS, Microsoft Windows)
- [CVE-2020-1000](https://cve.now/CVE-2020-1000.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-1001](https://cve.now/CVE-2020-1001.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push (no CVSS, Microsoft Windows)
- [CVE-2020-1002](https://cve.now/CVE-2020-1002.md): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit th (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +2)
- [CVE-2020-0996](https://cve.now/CVE-2020-0996.md): An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update (no CVSS, Microsoft Windows)
- [CVE-2020-0999](https://cve.now/CVE-2020-0999.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0994](https://cve.now/CVE-2020-0994.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0995](https://cve.now/CVE-2020-0995.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0992](https://cve.now/CVE-2020-0992.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0993](https://cve.now/CVE-2020-0993.md): A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnera (no CVSS, Microsoft Windows)
- [CVE-2020-0988](https://cve.now/CVE-2020-0988.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0991](https://cve.now/CVE-2020-0991.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2020-0984](https://cve.now/CVE-2020-0984.md): An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before e (no CVSS, Microsoft AutoUpdate for Mac)
- [CVE-2020-0985](https://cve.now/CVE-2020-0985.md): An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update (no CVSS, Microsoft Windows)
- [CVE-2020-0987](https://cve.now/CVE-2020-0987.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr (no CVSS, Microsoft Windows)
- [CVE-2020-0982](https://cve.now/CVE-2020-0982.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr (no CVSS, Microsoft Windows)
- [CVE-2020-0983](https://cve.now/CVE-2020-0983.md): An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win (no CVSS, Microsoft Windows)
- [CVE-2020-0980](https://cve.now/CVE-2020-0980.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-0981](https://cve.now/CVE-2020-0981.md): A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploi (no CVSS, Microsoft Windows)
- [CVE-2020-0978](https://cve.now/CVE-2020-0978.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0979](https://cve.now/CVE-2020-0979.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft Office 365 ProPlus)
- [CVE-2020-0976](https://cve.now/CVE-2020-0976.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0977](https://cve.now/CVE-2020-0977.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0973](https://cve.now/CVE-2020-0973.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0974](https://cve.now/CVE-2020-0974.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0975](https://cve.now/CVE-2020-0975.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0971](https://cve.now/CVE-2020-0971.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0972](https://cve.now/CVE-2020-0972.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected S (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0969](https://cve.now/CVE-2020-0969.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-b (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0970](https://cve.now/CVE-2020-0970.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0967](https://cve.now/CVE-2020-0967.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0968](https://cve.now/CVE-2020-0968.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (CVSS 7.5, KEV, Microsoft Internet Explorer)
- [CVE-2020-0964](https://cve.now/CVE-2020-0964.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka (no CVSS, Microsoft Windows)
- [CVE-2020-0965](https://cve.now/CVE-2020-0965.md): A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Win (no CVSS, Microsoft Windows)
- [CVE-2020-0966](https://cve.now/CVE-2020-0966.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execut (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0961](https://cve.now/CVE-2020-0961.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka (no CVSS, Microsoft Office)
- [CVE-2020-0962](https://cve.now/CVE-2020-0962.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2020-0959](https://cve.now/CVE-2020-0959.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0960](https://cve.now/CVE-2020-0960.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0957](https://cve.now/CVE-2020-0957.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-0958](https://cve.now/CVE-2020-0958.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-0955](https://cve.now/CVE-2020-0955.md): An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel (no CVSS, Microsoft Windows)
- [CVE-2020-0956](https://cve.now/CVE-2020-0956.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, ak (no CVSS, Microsoft Windows)
- [CVE-2020-0953](https://cve.now/CVE-2020-0953.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0954](https://cve.now/CVE-2020-0954.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0950](https://cve.now/CVE-2020-0950.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-0952](https://cve.now/CVE-2020-0952.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows (no CVSS, Microsoft Windows)
- [CVE-2020-0947](https://cve.now/CVE-2020-0947.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-0948](https://cve.now/CVE-2020-0948.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-0949](https://cve.now/CVE-2020-0949.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Co (no CVSS, Microsoft Windows)
- [CVE-2020-0945](https://cve.now/CVE-2020-0945.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-0946](https://cve.now/CVE-2020-0946.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-0943](https://cve.now/CVE-2020-0943.md): An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes (no CVSS, Microsoft Your Phone Companion App for Android)
- [CVE-2020-0944](https://cve.now/CVE-2020-0944.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka (no CVSS, Microsoft Windows)
- [CVE-2020-0940](https://cve.now/CVE-2020-0940.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push (no CVSS, Microsoft Windows)
- [CVE-2020-0942](https://cve.now/CVE-2020-0942.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka (no CVSS, Microsoft Windows)
- [CVE-2020-0938](https://cve.now/CVE-2020-0938.md): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-0939](https://cve.now/CVE-2020-0939.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-0936](https://cve.now/CVE-2020-0936.md): An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled Ta (no CVSS, Microsoft Windows)
- [CVE-2020-0937](https://cve.now/CVE-2020-0937.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information (no CVSS, Microsoft Windows)
- [CVE-2020-0933](https://cve.now/CVE-2020-0933.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0934](https://cve.now/CVE-2020-0934.md): An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, an (no CVSS, Microsoft Windows)
- [CVE-2020-0935](https://cve.now/CVE-2020-0935.md): An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'One (no CVSS, Microsoft OneDrive for Windows)
- [CVE-2020-0931](https://cve.now/CVE-2020-0931.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Foundation · Microsoft SharePoint E… +2)
- [CVE-2020-0932](https://cve.now/CVE-2020-0932.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0929](https://cve.now/CVE-2020-0929.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0930](https://cve.now/CVE-2020-0930.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0926](https://cve.now/CVE-2020-0926.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0927](https://cve.now/CVE-2020-0927.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0923](https://cve.now/CVE-2020-0923.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0924](https://cve.now/CVE-2020-0924.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0925](https://cve.now/CVE-2020-0925.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0919](https://cve.now/CVE-2020-0919.md): An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka (no CVSS, Microsoft Remote Desktop for Mac)
- [CVE-2020-0920](https://cve.now/CVE-2020-0920.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application pa (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0917](https://cve.now/CVE-2020-0917.md): An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Window (no CVSS, Microsoft Windows)
- [CVE-2020-0918](https://cve.now/CVE-2020-0918.md): An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Window (no CVSS, Microsoft Windows)
- [CVE-2020-0910](https://cve.now/CVE-2020-0910.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us (no CVSS, Microsoft Windows)
- [CVE-2020-0913](https://cve.now/CVE-2020-0913.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva (no CVSS, Microsoft Windows)
- [CVE-2020-0906](https://cve.now/CVE-2020-0906.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka ' (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2020-0907](https://cve.now/CVE-2020-0907.md): A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics (no CVSS, Microsoft Windows)
- [CVE-2020-0899](https://cve.now/CVE-2020-0899.md): An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Micros (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0900](https://cve.now/CVE-2020-0900.md): An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'V (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0888](https://cve.now/CVE-2020-0888.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-0889](https://cve.now/CVE-2020-0889.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En (no CVSS, Microsoft Windows)
- [CVE-2020-0895](https://cve.now/CVE-2020-0895.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine Rem (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0821](https://cve.now/CVE-2020-0821.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information (no CVSS, Microsoft Windows)
- [CVE-2020-0835](https://cve.now/CVE-2020-0835.md): An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows Defend (no CVSS, Microsoft Windows Defender antimalware platform)
- [CVE-2020-0784](https://cve.now/CVE-2020-0784.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulner (no CVSS, Microsoft Windows)
- [CVE-2020-0794](https://cve.now/CVE-2020-0794.md): A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. (no CVSS, Microsoft Windows)
- [CVE-2020-0699](https://cve.now/CVE-2020-0699.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis (no CVSS, Microsoft Windows)
- [CVE-2020-0760](https://cve.now/CVE-2020-0760.md): A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote C (no CVSS, Microsoft Project · Microsoft Office +7)
- [CVE-2020-0687](https://cve.now/CVE-2020-0687.md): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microso (no CVSS, Microsoft Windows)
- [CVE-2020-11783](https://cve.now/CVE-2020-11783.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11782](https://cve.now/CVE-2020-11782.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11781](https://cve.now/CVE-2020-11781.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11780](https://cve.now/CVE-2020-11780.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11779](https://cve.now/CVE-2020-11779.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11534](https://cve.now/CVE-2020-11534.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11535](https://cve.now/CVE-2020-11535.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11536](https://cve.now/CVE-2020-11536.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11537](https://cve.now/CVE-2020-11537.md): A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11778](https://cve.now/CVE-2020-11778.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11777](https://cve.now/CVE-2020-11777.md): Certain NETGEAR devices are affected by Stored XSS. (CVSS 6.0)
- [CVE-2020-11776](https://cve.now/CVE-2020-11776.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11775](https://cve.now/CVE-2020-11775.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11774](https://cve.now/CVE-2020-11774.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11773](https://cve.now/CVE-2020-11773.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11772](https://cve.now/CVE-2020-11772.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11771](https://cve.now/CVE-2020-11771.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11770](https://cve.now/CVE-2020-11770.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.0)
- [CVE-2020-11769](https://cve.now/CVE-2020-11769.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11768](https://cve.now/CVE-2020-11768.md): Certain NETGEAR devices are affected by Stored XSS. (CVSS 6.0)
- [CVE-2019-20767](https://cve.now/CVE-2019-20767.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2020-2952](https://cve.now/CVE-2020-2952.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 6.5, Oracle HTTP Server)
- [CVE-2020-2953](https://cve.now/CVE-2020-2953.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promoti (CVSS 9.8, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2954](https://cve.now/CVE-2020-2954.md): Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway). (CVSS 6.1, Oracle PeopleSoft Enterprise HCM Candidate Gateway)
- [CVE-2020-2955](https://cve.now/CVE-2020-2955.md): Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing). (CVSS 6.3, Oracle FLEXCUBE Core Banking)
- [CVE-2020-2956](https://cve.now/CVE-2020-2956.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 8.1, Oracle Human Resources)
- [CVE-2020-2958](https://cve.now/CVE-2020-2958.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2959](https://cve.now/CVE-2020-2959.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.6, Oracle VM VirtualBox)
- [CVE-2020-2961](https://cve.now/CVE-2020-2961.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework (Oracle OHS)). (CVSS 9.8, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2963](https://cve.now/CVE-2020-2963.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2964](https://cve.now/CVE-2020-2964.md): Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User Interface) (CVSS 7.1, Oracle Financial Services Data Foundation)
- [CVE-2020-2931](https://cve.now/CVE-2020-2931.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter). (CVSS 9.8, Oracle Knowledge)
- [CVE-2020-2932](https://cve.now/CVE-2020-2932.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 5.9, Oracle Knowledge)
- [CVE-2020-2933](https://cve.now/CVE-2020-2933.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 2.2, Oracle MySQL Connectors)
- [CVE-2020-2934](https://cve.now/CVE-2020-2934.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 5.0, Oracle WebLogic Server)
- [CVE-2020-2935](https://cve.now/CVE-2020-2935.md): Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications (compo (CVSS 7.1, Oracle Financial Services Hedge Management and IFRS Valuati…)
- [CVE-2020-2936](https://cve.now/CVE-2020-2936.md): Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User Int (CVSS 7.1, Oracle Financial Services Balance Sheet Planning)
- [CVE-2020-2937](https://cve.now/CVE-2020-2937.md): Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). (CVSS 7.1, Oracle Insurance Accounting Analyzer)
- [CVE-2020-2938](https://cve.now/CVE-2020-2938.md): Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (com (CVSS 7.1, Oracle Financial Services Loan Loss Forecasting and Provisi…)
- [CVE-2020-2939](https://cve.now/CVE-2020-2939.md): Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component: User (CVSS 7.1, Oracle Financial Services Asset Liability Management)
- [CVE-2020-2940](https://cve.now/CVE-2020-2940.md): Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User I (CVSS 7.1, Oracle Financial Services Profitability Management)
- [CVE-2020-2941](https://cve.now/CVE-2020-2941.md): Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User Int (CVSS 7.1, Oracle Financial Services Funds Transfer Pricing)
- [CVE-2020-2942](https://cve.now/CVE-2020-2942.md): Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: Us (CVSS 7.1, Oracle Financial Services Price Creation and Discovery)
- [CVE-2020-2943](https://cve.now/CVE-2020-2943.md): Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications ( (CVSS 7.1, Oracle Financial Services Liquidity Risk Measurement and Ma…)
- [CVE-2020-2944](https://cve.now/CVE-2020-2944.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 8.8, Oracle Solaris Operating System)
- [CVE-2020-2945](https://cve.now/CVE-2020-2945.md): Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial Serv (CVSS 7.1, Oracle Financial Services Deposit Insurance Calculations fo…)
- [CVE-2020-2946](https://cve.now/CVE-2020-2946.md): Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring). (CVSS 6.0, Oracle APM - Application Performance Management)
- [CVE-2020-2947](https://cve.now/CVE-2020-2947.md): Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). (CVSS 4.3, Oracle PeopleSoft Enterprise HCM Absence Management)
- [CVE-2020-2949](https://cve.now/CVE-2020-2949.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). (CVSS 5.3, Oracle Coherence)
- [CVE-2020-2950](https://cve.now/CVE-2020-2950.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 9.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2951](https://cve.now/CVE-2020-2951.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2906](https://cve.now/CVE-2020-2906.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change). (CVSS 6.5, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2020-2907](https://cve.now/CVE-2020-2907.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2908](https://cve.now/CVE-2020-2908.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2909](https://cve.now/CVE-2020-2909.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 2.8, Oracle VM VirtualBox)
- [CVE-2020-2910](https://cve.now/CVE-2020-2910.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2911](https://cve.now/CVE-2020-2911.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2912](https://cve.now/CVE-2020-2912.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Self-Service). (CVSS 5.0, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2020-2913](https://cve.now/CVE-2020-2913.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.0, Oracle VM VirtualBox)
- [CVE-2020-2914](https://cve.now/CVE-2020-2914.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.0, Oracle VM VirtualBox)
- [CVE-2020-2915](https://cve.now/CVE-2020-2915.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). (CVSS 9.8, Oracle Coherence)
- [CVE-2020-2920](https://cve.now/CVE-2020-2920.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 6.1, Oracle Agile PLM Framework)
- [CVE-2020-2921](https://cve.now/CVE-2020-2921.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2922](https://cve.now/CVE-2020-2922.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 3.7, Oracle MySQL Server)
- [CVE-2020-2923](https://cve.now/CVE-2020-2923.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2924](https://cve.now/CVE-2020-2924.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2925](https://cve.now/CVE-2020-2925.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2926](https://cve.now/CVE-2020-2926.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2927](https://cve.now/CVE-2020-2927.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2020-2928](https://cve.now/CVE-2020-2928.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2929](https://cve.now/CVE-2020-2929.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2020-2930](https://cve.now/CVE-2020-2930.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2886](https://cve.now/CVE-2020-2886.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2887](https://cve.now/CVE-2020-2887.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 5.3, Oracle Customer Interaction History)
- [CVE-2020-2888](https://cve.now/CVE-2020-2888.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). (CVSS 5.3, Oracle Marketing)
- [CVE-2020-2889](https://cve.now/CVE-2020-2889.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 5.3, Oracle CRM Technical Foundation)
- [CVE-2020-2890](https://cve.now/CVE-2020-2890.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). (CVSS 8.2, Oracle Applications Framework)
- [CVE-2020-2891](https://cve.now/CVE-2020-2891.md): Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User (CVSS 7.1, Oracle Financial Services Liquidity Risk Management)
- [CVE-2020-2892](https://cve.now/CVE-2020-2892.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2893](https://cve.now/CVE-2020-2893.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2894](https://cve.now/CVE-2020-2894.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2895](https://cve.now/CVE-2020-2895.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2896](https://cve.now/CVE-2020-2896.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2897](https://cve.now/CVE-2020-2897.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2898](https://cve.now/CVE-2020-2898.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2899](https://cve.now/CVE-2020-2899.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). (CVSS 4.8, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2020-2900](https://cve.now/CVE-2020-2900.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Tools). (CVSS 3.7, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2901](https://cve.now/CVE-2020-2901.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2902](https://cve.now/CVE-2020-2902.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2020-2903](https://cve.now/CVE-2020-2903.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2904](https://cve.now/CVE-2020-2904.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2905](https://cve.now/CVE-2020-2905.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2865](https://cve.now/CVE-2020-2865.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). (CVSS 5.3, Oracle Configurator)
- [CVE-2020-2866](https://cve.now/CVE-2020-2866.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 5.3, Oracle Applications Framework)
- [CVE-2020-2867](https://cve.now/CVE-2020-2867.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 8.2, Oracle WebLogic Server)
- [CVE-2020-2868](https://cve.now/CVE-2020-2868.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2869](https://cve.now/CVE-2020-2869.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2870](https://cve.now/CVE-2020-2870.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2871](https://cve.now/CVE-2020-2871.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2872](https://cve.now/CVE-2020-2872.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2873](https://cve.now/CVE-2020-2873.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 8.2, Oracle Customer Interaction History)
- [CVE-2020-2874](https://cve.now/CVE-2020-2874.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Customer Search). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2875](https://cve.now/CVE-2020-2875.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 4.7, Oracle MySQL Connectors)
- [CVE-2020-2876](https://cve.now/CVE-2020-2876.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2877](https://cve.now/CVE-2020-2877.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). (CVSS 8.2, Oracle Partner Management)
- [CVE-2020-2878](https://cve.now/CVE-2020-2878.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2879](https://cve.now/CVE-2020-2879.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.2, Oracle Scripting)
- [CVE-2020-2880](https://cve.now/CVE-2020-2880.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: OTA Training Activities). (CVSS 8.2, Oracle Learning Management)
- [CVE-2020-2881](https://cve.now/CVE-2020-2881.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2882](https://cve.now/CVE-2020-2882.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 8.1, Oracle Human Resources)
- [CVE-2020-2883](https://cve.now/CVE-2020-2883.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-2884](https://cve.now/CVE-2020-2884.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2885](https://cve.now/CVE-2020-2885.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 8.2, Oracle Document Management and Collaboration)
- [CVE-2020-2844](https://cve.now/CVE-2020-2844.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2845](https://cve.now/CVE-2020-2845.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2846](https://cve.now/CVE-2020-2846.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2847](https://cve.now/CVE-2020-2847.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2848](https://cve.now/CVE-2020-2848.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2849](https://cve.now/CVE-2020-2849.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2850](https://cve.now/CVE-2020-2850.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2851](https://cve.now/CVE-2020-2851.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2020-2852](https://cve.now/CVE-2020-2852.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2853](https://cve.now/CVE-2020-2853.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2854](https://cve.now/CVE-2020-2854.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2855](https://cve.now/CVE-2020-2855.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Admin). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2856](https://cve.now/CVE-2020-2856.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2857](https://cve.now/CVE-2020-2857.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2858](https://cve.now/CVE-2020-2858.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2859](https://cve.now/CVE-2020-2859.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). (CVSS 7.5, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2860](https://cve.now/CVE-2020-2860.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2861](https://cve.now/CVE-2020-2861.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2862](https://cve.now/CVE-2020-2862.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 4.7, Oracle One-to-One Fulfillment)
- [CVE-2020-2863](https://cve.now/CVE-2020-2863.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.5, Oracle Advanced Outbound Telephony)
- [CVE-2020-2864](https://cve.now/CVE-2020-2864.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). (CVSS 5.3, Oracle iSupplier Portal)
- [CVE-2020-2824](https://cve.now/CVE-2020-2824.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2825](https://cve.now/CVE-2020-2825.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2826](https://cve.now/CVE-2020-2826.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2827](https://cve.now/CVE-2020-2827.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2828](https://cve.now/CVE-2020-2828.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-2829](https://cve.now/CVE-2020-2829.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services). (CVSS 4.9, Oracle WebLogic Server)
- [CVE-2020-2830](https://cve.now/CVE-2020-2830.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). (CVSS 5.3, Oracle Java)
- [CVE-2020-2831](https://cve.now/CVE-2020-2831.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2832](https://cve.now/CVE-2020-2832.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2833](https://cve.now/CVE-2020-2833.md): Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). (CVSS 8.2, Oracle Quoting)
- [CVE-2020-2834](https://cve.now/CVE-2020-2834.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2835](https://cve.now/CVE-2020-2835.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2836](https://cve.now/CVE-2020-2836.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2837](https://cve.now/CVE-2020-2837.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2838](https://cve.now/CVE-2020-2838.md): Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). (CVSS 8.6, Oracle CRM Gateway for Mobile Devices)
- [CVE-2020-2839](https://cve.now/CVE-2020-2839.md): Vulnerability in the Oracle Service Intelligence product of Oracle E-Business Suite (component: Internal Operations- Search). (CVSS 8.2, Oracle Service Intelligence)
- [CVE-2020-2840](https://cve.now/CVE-2020-2840.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2841](https://cve.now/CVE-2020-2841.md): Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). (CVSS 8.2, Oracle Knowledge Management)
- [CVE-2020-2842](https://cve.now/CVE-2020-2842.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2843](https://cve.now/CVE-2020-2843.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2803](https://cve.now/CVE-2020-2803.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2020-2804](https://cve.now/CVE-2020-2804.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2805](https://cve.now/CVE-2020-2805.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2020-2806](https://cve.now/CVE-2020-2806.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2020-2807](https://cve.now/CVE-2020-2807.md): Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Administration). (CVSS 8.2, Oracle Marketing Encyclopedia System)
- [CVE-2020-2808](https://cve.now/CVE-2020-2808.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2809](https://cve.now/CVE-2020-2809.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2810](https://cve.now/CVE-2020-2810.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 4.7, Oracle iStore)
- [CVE-2020-2811](https://cve.now/CVE-2020-2811.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-2812](https://cve.now/CVE-2020-2812.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2813](https://cve.now/CVE-2020-2813.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: KB Search). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2814](https://cve.now/CVE-2020-2814.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2815](https://cve.now/CVE-2020-2815.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2816](https://cve.now/CVE-2020-2816.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 7.5, Oracle Java)
- [CVE-2020-2817](https://cve.now/CVE-2020-2817.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.2, Oracle Scripting)
- [CVE-2020-2818](https://cve.now/CVE-2020-2818.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). (CVSS 8.2, Oracle Universal Work Queue)
- [CVE-2020-2819](https://cve.now/CVE-2020-2819.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). (CVSS 8.2, Oracle Universal Work Queue)
- [CVE-2020-2820](https://cve.now/CVE-2020-2820.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2020-2821](https://cve.now/CVE-2020-2821.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Budget). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-2822](https://cve.now/CVE-2020-2822.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claims). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-2823](https://cve.now/CVE-2020-2823.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2020-2780](https://cve.now/CVE-2020-2780.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2781](https://cve.now/CVE-2020-2781.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java)
- [CVE-2020-2782](https://cve.now/CVE-2020-2782.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 7.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2783](https://cve.now/CVE-2020-2783.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2020-2784](https://cve.now/CVE-2020-2784.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2785](https://cve.now/CVE-2020-2785.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2786](https://cve.now/CVE-2020-2786.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2787](https://cve.now/CVE-2020-2787.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2789](https://cve.now/CVE-2020-2789.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2790](https://cve.now/CVE-2020-2790.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2791](https://cve.now/CVE-2020-2791.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 9.8, Oracle Knowledge)
- [CVE-2020-2793](https://cve.now/CVE-2020-2793.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 7.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-2794](https://cve.now/CVE-2020-2794.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Email Address list and Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2795](https://cve.now/CVE-2020-2795.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 6.3, Oracle Knowledge)
- [CVE-2020-2796](https://cve.now/CVE-2020-2796.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2797](https://cve.now/CVE-2020-2797.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2798](https://cve.now/CVE-2020-2798.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2799](https://cve.now/CVE-2020-2799.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 6.3, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2800](https://cve.now/CVE-2020-2800.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). (CVSS 4.8, Oracle Java)
- [CVE-2020-2801](https://cve.now/CVE-2020-2801.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2802](https://cve.now/CVE-2020-2802.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 7.7, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2759](https://cve.now/CVE-2020-2759.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2760](https://cve.now/CVE-2020-2760.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2020-2761](https://cve.now/CVE-2020-2761.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2762](https://cve.now/CVE-2020-2762.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2763](https://cve.now/CVE-2020-2763.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2764](https://cve.now/CVE-2020-2764.md): Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console). (CVSS 3.7, Oracle Java)
- [CVE-2020-2765](https://cve.now/CVE-2020-2765.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2766](https://cve.now/CVE-2020-2766.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 5.3, Oracle WebLogic Server)
- [CVE-2020-2767](https://cve.now/CVE-2020-2767.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 4.8, Oracle Java)
- [CVE-2020-2768](https://cve.now/CVE-2020-2768.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2020-2769](https://cve.now/CVE-2020-2769.md): Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). (CVSS 2.4, Oracle Hyperion Financial Reporting)
- [CVE-2020-2770](https://cve.now/CVE-2020-2770.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2771](https://cve.now/CVE-2020-2771.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo). (CVSS 2.5, Oracle Solaris Operating System)
- [CVE-2020-2772](https://cve.now/CVE-2020-2772.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Absence Recording, Maintenance). (CVSS 4.1, Oracle Human Resources)
- [CVE-2020-2773](https://cve.now/CVE-2020-2773.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 3.7, Oracle Java)
- [CVE-2020-2774](https://cve.now/CVE-2020-2774.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2775](https://cve.now/CVE-2020-2775.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2776](https://cve.now/CVE-2020-2776.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 8.6, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2777](https://cve.now/CVE-2020-2777.md): Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2020-2778](https://cve.now/CVE-2020-2778.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java)
- [CVE-2020-2779](https://cve.now/CVE-2020-2779.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2738](https://cve.now/CVE-2020-2738.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). (CVSS 4.3, Oracle Siebel UI Framework)
- [CVE-2020-2739](https://cve.now/CVE-2020-2739.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 7.4, Oracle WebCenter Sites)
- [CVE-2020-2740](https://cve.now/CVE-2020-2740.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 4.6, Oracle Access Manager)
- [CVE-2020-2741](https://cve.now/CVE-2020-2741.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2742](https://cve.now/CVE-2020-2742.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2743](https://cve.now/CVE-2020-2743.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2744](https://cve.now/CVE-2020-2744.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security). (CVSS 5.4, Oracle Transportation Management)
- [CVE-2020-2745](https://cve.now/CVE-2020-2745.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). (CVSS 4.3, Oracle Access Manager)
- [CVE-2020-2746](https://cve.now/CVE-2020-2746.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (CVSS 8.1, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-2747](https://cve.now/CVE-2020-2747.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine). (CVSS 5.4, Oracle Access Manager)
- [CVE-2020-2748](https://cve.now/CVE-2020-2748.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2020-2749](https://cve.now/CVE-2020-2749.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). (CVSS 2.5, Oracle Solaris Operating System)
- [CVE-2020-2750](https://cve.now/CVE-2020-2750.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). (CVSS 7.5, Oracle General Ledger)
- [CVE-2020-2751](https://cve.now/CVE-2020-2751.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2752](https://cve.now/CVE-2020-2752.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2020-2753](https://cve.now/CVE-2020-2753.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 5.3, Oracle Workflow)
- [CVE-2020-2754](https://cve.now/CVE-2020-2754.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). (CVSS 3.7, Oracle Java)
- [CVE-2020-2755](https://cve.now/CVE-2020-2755.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). (CVSS 3.7, Oracle Java)
- [CVE-2020-2756](https://cve.now/CVE-2020-2756.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2757](https://cve.now/CVE-2020-2757.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2758](https://cve.now/CVE-2020-2758.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2019-2880](https://cve.now/CVE-2019-2880.md): Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security). (CVSS 8.8, Oracle Retail Store Inventory Management)
- [CVE-2020-2514](https://cve.now/CVE-2020-2514.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 4.6, Oracle Application Express)
- [CVE-2020-2522](https://cve.now/CVE-2020-2522.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 4.3, Oracle Knowledge)
- [CVE-2020-2524](https://cve.now/CVE-2020-2524.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). (CVSS 5.9, Oracle Knowledge)
- [CVE-2020-2553](https://cve.now/CVE-2020-2553.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 4.8, Oracle Knowledge)
- [CVE-2020-2594](https://cve.now/CVE-2020-2594.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Project (CVSS 6.5, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2706](https://cve.now/CVE-2020-2706.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Project (CVSS 5.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2733](https://cve.now/CVE-2020-2733.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). (CVSS 9.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2020-2734](https://cve.now/CVE-2020-2734.md): Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. (CVSS 2.4, Oracle Database)
- [CVE-2020-2735](https://cve.now/CVE-2020-2735.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 8.0, Oracle Database)
- [CVE-2020-2737](https://cve.now/CVE-2020-2737.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 6.4, Oracle Database)
- [CVE-2019-19500](https://cve.now/CVE-2019-19500.md): Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment f (no CVSS)
- [CVE-2020-7255](https://cve.now/CVE-2020-7255.md): Privilege Escalation vulnerability in ENS (CVSS 3.9, McAfee Endpoint Security)
- [CVE-2020-7250](https://cve.now/CVE-2020-7250.md): ENS symbolic link log file manipulation vulnerability (CVSS 8.2, McAfee Endpoint Security)
- [CVE-2020-7257](https://cve.now/CVE-2020-7257.md): Privilege Escalation vulnerability through Symbolic links in ENS (CVSS 8.4, McAfee Endpoint Security)
- [CVE-2020-7259](https://cve.now/CVE-2020-7259.md): Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules (CVSS 6.6, McAfee Endpoint Security)
- [CVE-2020-7261](https://cve.now/CVE-2020-7261.md): Buffer overwrite in ENS allowed to bypass AMSI protection (CVSS 6.1, McAfee Endpoint Security)
- [CVE-2020-7273](https://cve.now/CVE-2020-7273.md): Autorun registry bypass (CVSS 6.7, McAfee Endpoint Security)
- [CVE-2020-7275](https://cve.now/CVE-2020-7275.md): Unquoted service paths for some McAfee ENS files (CVSS 4.8, McAfee Endpoint Security)
- [CVE-2020-7274](https://cve.now/CVE-2020-7274.md): ENS elevated permissions vulnerability (CVSS 6.6, McAfee Endpoint Security)
- [CVE-2020-7277](https://cve.now/CVE-2020-7277.md): McAfee processes not protected (CVSS 6.8, McAfee Endpoint Security)
- [CVE-2020-7276](https://cve.now/CVE-2020-7276.md): Unrestricted Policy Management using MfeUpgradeTool.exe (CVSS 6.4, McAfee Endpoint Security)
- [CVE-2020-7278](https://cve.now/CVE-2020-7278.md): McAfee firewall rules not enforced correctly (CVSS 7.4, McAfee Endpoint Security)
- [CVE-2020-3932](https://cve.now/CVE-2020-3932.md): Draytek VigorAP910C - Information Leakage (CVSS 7.5, DRAYTEK VigorAP910C)
- [CVE-2020-10514](https://cve.now/CVE-2020-10514.md): iCatch DVR - Command Injection (CVSS 8.8, iCatch DVR firmware)
- [CVE-2020-10513](https://cve.now/CVE-2020-10513.md): iCatch DVR - Broken Access Control (CVSS 8.8, iCatch DVR firmware)
- [CVE-2020-10512](https://cve.now/CVE-2020-10512.md): HGiga C&Cmail - SQL Injection (CVSS 8.8, HGiga C&Cmail)
- [CVE-2020-10511](https://cve.now/CVE-2020-10511.md): HGiga C&Cmail - Broken Access Control (CVSS 9.8, HGiga C&Cmail)
- [CVE-2020-10507](https://cve.now/CVE-2020-10507.md): ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration (CVSS 9.8, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-10506](https://cve.now/CVE-2020-10506.md): ALLE INFORMATION CO., LTD. School Manage System - Path Traversal (CVSS 7.5, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-10505](https://cve.now/CVE-2020-10505.md): ALLE INFORMATION CO., LTD. School Manage System - SQL Injection (CVSS 9.8, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-11767](https://cve.now/CVE-2020-11767.md): Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. (no CVSS)
- [CVE-2020-10699](https://cve.now/CVE-2020-10699.md): A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. (CVSS 7.8, Datera targetcli)
- [CVE-2020-10932](https://cve.now/CVE-2020-10932.md): An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.