CVEs published July 15, 2020
278 CVEs were published on July 15, 2020: 16 critical, 70 high. 1 is now in CISA KEV.
- Published
- 278
- Critical
- 16
- High
- 70
- Medium
- 120
- Low
- 14
- Unrated
- 58
- Now in CISA KEV
- 1
- Fix available
- 52
Most affected products
- Oracle MySQL Server
- 32
- Oracle VM VirtualBox
- 25
- Oracle WebLogic Server
- 17
- Oracle Java
- 11
- Oracle Financial Services Analytical Applications Infrastru…
- 9
- Oracle Application Express
- 8
- Advantech iView
- 6
- Oracle CRM Technical Foundation
- 6
- Oracle Primavera Portfolio Management
- 6
- Oracle BI Publisher
- 5
Critical 16
- CVE-2020-10287RVD#3326: Hardcoded default credentials on IRC 5 OPC ServerABB IRB140
- CVE-2020-10288RVD#3327: No authentication required for accesing ABB IRC5 FTP serverABB IRB140
- CVE-2020-10286RVD#3323: Mismanaged permission implementation leads to privilege escalation, exfiltration of sensitive information, and DoSuFactory xArm 5 Lite, xArm 6 and xArm
- CVE-2020-10285RVD#3322: Weak authentication implementation make the system vulnerable to a brute-force attack over adjacent networksuFactory xArm5 Lite, xArm 6 and xArm
- CVE-2020-10284RVD#3321: No Authentication required to exert manual control of the robotuFactory xArm5 Lite, xArm 6 and xArm
- CVE-2020-14687Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14701Vulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface).Oracle SD-WAN Aware
- CVE-2020-14705Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management).Oracle GoldenGate
- CVE-2020-14658Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14665Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Invoice).Oracle Trade Management
- CVE-2020-14644Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14645Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14625Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14598Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications).Oracle CRM Gateway for Mobile Devices
- CVE-2020-14599Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications).Oracle CRM Gateway for Mobile Devices
- CVE-2020-14606Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface).Oracle SD-WAN Edge
High 70
- CVE-2020-2983Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking).Oracle Data Masking and Subsetting
- CVE-2020-2984Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script).Oracle Configuration Manager
- CVE-2020-14724Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility).Oracle Solaris Operating System
- CVE-2020-2967Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2020-2968Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2020-2981Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2020-2982Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-14709Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Card).Oracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-14713Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14718Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI).Oracle GraalVM Enterprise Edition
- CVE-2020-14719Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities).Oracle Internet Expenses
- CVE-2020-14720Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utilities).Oracle Internet Expenses
- CVE-2020-14723Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX).Oracle Help Technologies
- CVE-2020-14686Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-14688Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2020-14690Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14691Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Oracle Financial Services Liquidity Risk Management
- CVE-2020-14696Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Layout Templates).Oracle BI Publisher
- CVE-2020-14697Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14699Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14666Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-14667Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14668Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2020-14669Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet).Oracle Configurator
- CVE-2020-14670Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Settings).Oracle Advanced Outbound Telephony
- CVE-2020-14671Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-14674Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14675Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14676Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14677Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14678Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14679Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14681Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2020-14682Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-14649Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14657Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14660Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14663Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14664Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX).Oracle Java
- CVE-2020-14630Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload).Oracle Enterprise Session Border Controller
- CVE-2020-14639Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2020-14642Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore).Oracle Coherence
- CVE-2020-14646Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14647Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14610Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Applications Framework
- CVE-2020-14611Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).Oracle WebCenter Portal
- CVE-2020-14626Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14628Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14593Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2020-14595Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager).Oracle iLearning
- CVE-2020-14596Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Address Book).Oracle iStore
- CVE-2020-14602Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14608Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server).Oracle Fusion Middleware MapViewer
- CVE-2020-14609Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Answers).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14580Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications (component: System Admin)Oracle Communications Session Border Controller
- CVE-2020-14582Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration).Oracle iStore
- CVE-2020-14583Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-14584Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2020-14585Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).Oracle BI Publisher
- CVE-2020-14588Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2020-14589Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2020-14561Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation).Oracle Hospitality Reporting and Analytics
- CVE-2020-14565Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: Security).Oracle Unified Directory
- CVE-2020-14569Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-14570Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).Oracle BI Publisher
- CVE-2020-14571Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).Oracle BI Publisher
- CVE-2020-14534Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups).Oracle Project Planning and Control
- CVE-2020-14535Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center).Oracle Commerce Platform
- CVE-2020-14536Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Workbench).Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2020-14543Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation).Oracle Hospitality Reporting and Analytics
Medium, low and unrated 192
- CVE-2019-20908An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4.
- CVE-2020-15780An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7.
- CVE-2020-15107x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclaveopenenclave
- CVE-2019-17639In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the The Eclipse Foundation Eclipse OpenJ9
- CVE-2020-9311In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which casilverstripe/cms · silverstripe/framework
- CVE-2020-9309Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for examplsilverstripe/cms
- CVE-2020-15779A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js.socket.io-file
- CVE-2020-6164In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose tsilverstripe/cms · silverstripe/framework
- CVE-2020-6165SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set.silverstripe/recipe-cms · silverstripe/graphql
- CVE-2020-8958Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to
- CVE-2020-14982A Blind SQL Injection vulnerability in Kronos WebTA 3.8.x and later before 4.0 (affecting the com.threeis.webta.H352premPayRequest servlet's
- CVE-2020-13788Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on github.com/goharbor/harbor
- CVE-2020-15051An issue was discovered in Artica Proxy before 4.30.000000.
- CVE-2020-11438LibreHealth EMR v2.0.0 is affected by systemic CSRF.
- CVE-2020-11436LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including admini
- CVE-2020-11437LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database.
- CVE-2020-11439LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed within the EMR applica
- CVE-2020-15603An invalid memory read vulnerability in a Trend Micro Secuity 2020 (v16.0.0.1302 and below) consumer family of products' driver could allow Trend Micro Security
- CVE-2020-15602An untrusted search path remote code execution (RCE) vulnerability in the Trend Micro Secuity 2020 (v16.0.0.1146 and below) consumer family Trend Micro Security
- CVE-2020-15366An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.ajv
- CVE-2020-14066IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
- CVE-2020-14065IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.
- CVE-2020-14064IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.
- CVE-2020-12684XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input contai
- CVE-2020-12854A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11.
- CVE-2020-15718RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the PrintSchedules.php script.
- CVE-2020-15717RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script.
- CVE-2020-15716RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php script.
- CVE-2019-19326Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnesilverstripe/framework
- CVE-2020-2513Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2562Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module).Oracle Primavera Portfolio Management
- CVE-2020-2966Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2969Vulnerability in the Data Pump component of Oracle Database Server.Oracle Database
- CVE-2020-2971Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2972Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2973Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2974Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2975Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2976Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2977Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-14706Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-14707Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14708Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment).Oracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-14710Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Security).Oracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-14711Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14712Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14714Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14715Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14716Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2020-14717Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework).Oracle Common Applications
- CVE-2020-14721Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI).Oracle Enterprise Communications Broker
- CVE-2020-14722Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI).Oracle Enterprise Communications Broker
- CVE-2020-14692Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (comOracle Financial Services Loan Loss Forecasting and Provisi…
- CVE-2020-14693Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface).Oracle Insurance Accounting Analyzer
- CVE-2020-14694Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14695Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14698Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14700Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14702Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14703Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14704Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14673Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14680Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14684Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14685Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14648Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14650Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14651Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles).Oracle MySQL Server
- CVE-2020-14652Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14653Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web AccOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-14654Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14655Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API).Oracle Security Service
- CVE-2020-14656Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking).Oracle MySQL Server
- CVE-2020-14659Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14661Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14662Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14629Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14631Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Audit).Oracle MySQL Server
- CVE-2020-14632Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).Oracle MySQL Server
- CVE-2020-14633Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14634Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14635Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Logging).Oracle Application Object Library
- CVE-2020-14636Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2020-14637Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2020-14638Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2020-14640Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps).Oracle WebLogic Server
- CVE-2020-14641Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles).Oracle MySQL Server
- CVE-2020-14643Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles).Oracle MySQL Server
- CVE-2020-14612Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Time and Labor).Oracle PeopleSoft Enterprise HCM Time and Labor
- CVE-2020-14613Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced User Interface).Oracle WebCenter Sites
- CVE-2020-14614Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14615Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14616Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting).Oracle Hospitality Reporting and Analytics
- CVE-2020-14617Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Platform, Mobile App).Oracle Primavera Unifier
- CVE-2020-14618Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Mobile App).Oracle Primavera Unifier
- CVE-2020-14619Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2020-14620Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-14621Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP).Oracle Java
- CVE-2020-14622Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14623Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14624Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON).Oracle MySQL Server
- CVE-2020-14627Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14591Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in).Oracle MySQL Server
- CVE-2020-14592Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14594Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Inventory IntegOracle Hospitality Reporting and Analytics
- CVE-2020-14597Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14600Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14601Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14603Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14604Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14605Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14607Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server).Oracle Fusion Middleware MapViewer
- CVE-2020-14573Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot).Oracle Java
- CVE-2020-14574Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications (component: FACE).Oracle Communications Interactive Session Recorder
- CVE-2020-14575Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-14576Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF).Oracle MySQL Server
- CVE-2020-14577Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-14578Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-14579Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-14581Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D).Oracle Java
- CVE-2020-14586Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14587Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses).Oracle PeopleSoft Enterprise FIN Expenses
- CVE-2020-14590Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Page Request).Oracle Applications Framework
- CVE-2020-14554Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics).Oracle Application Object Library
- CVE-2020-14555Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14556Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-14557Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2020-14558Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14559Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2020-14560Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization).Oracle Hyperion BI+
- CVE-2020-14562Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO).Oracle Java
- CVE-2020-14563Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI).Oracle Enterprise Communications Broker
- CVE-2020-14564Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Environment Mgmt Console).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14566Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2020-14567Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2020-14568Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14572Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-14537Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts).Oracle Solaris Operating System
- CVE-2020-14539Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14540Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-14541Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager).Oracle Hyperion Financial Close Management
- CVE-2020-14542Vulnerability in the Oracle Solaris product of Oracle Systems (component: libsuri).Oracle Solaris Operating System
- CVE-2020-14544Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function Security).Oracle Transportation Management
- CVE-2020-14545Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility).Oracle Solaris Operating System
- CVE-2020-14546Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager).Oracle Hyperion Financial Close Management
- CVE-2020-14547Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14548Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14549Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Server).Oracle Primavera Portfolio Management
- CVE-2020-14550Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-14551Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security).Oracle AutoVue 3D Professional Advanced
- CVE-2020-14552Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).Oracle WebCenter Portal
- CVE-2020-14553Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server
- CVE-2020-14527Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2020-14528Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access).Oracle Primavera Portfolio Management
- CVE-2020-14529Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module).Oracle Primavera Portfolio Management
- CVE-2020-14530Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None).Oracle Security Service
- CVE-2020-14531Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server).Oracle Siebel UI Framework
- CVE-2020-14532Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).Oracle Commerce Platform
- CVE-2020-14533Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).Oracle Commerce Platform
- CVE-2020-15117Denial of Service in Synergysymless synergy-core
- CVE-2020-2227Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in a stored cross-siteJenkins project Jenkins Deployer Framework Plugin · org.jen…
- CVE-2020-2228Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in a privilege escalatiJenkins project Jenkins Gitlab Authentication Plugin · org.…
- CVE-2020-2225Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multipleJenkins project Jenkins Matrix Project Plugin · org.jenkins…
- CVE-2020-2226Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, resulting in a stored Jenkins project Jenkins Matrix Authorization Strategy Plugi…
- CVE-2020-2223Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream jobs displayed in tJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2020-2224Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of builds with a singleJenkins project Jenkins Matrix Project Plugin · org.jenkins…
- CVE-2020-2220Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-Jenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2020-2221Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resultingJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2020-2222Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge tooltip, resulting inJenkins project Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2020-8178Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.jison
- CVE-2020-8203Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.lodash · lodash-es +6
- CVE-2020-15572Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor instances built to u
- CVE-2020-15700An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-15699An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-15698An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-15697An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-15696An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-15695An issue was discovered in Joomla! through 3.9.19.
- CVE-2020-9496XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03Apache OFBiz
- CVE-2020-13923IDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz before 17.12.04Apache OFBiz
- CVE-2019-17637In all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files referring to external entities could be explThe Eclipse Foundation Eclipse Web Tools Platform
- CVE-2020-7292Web Gateway (MWG) - Inappropriate Encoding for output contextMcAfee Web Gateway
- CVE-2020-4100"HCL Verse for Android was found to employ dynamic code loading."HCL Verse for Android"
- CVE-2020-14511Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EEDR-G902 and EDR-G903 Series Routers
- CVE-2020-5765Nessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper validation of input during scan configuration.Tenable Nessus
- CVE-2020-14501Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue.Advantech iView
- CVE-2020-14503Advantech iView, versions 5.6 and prior, has an improper input validation vulnerability.Advantech iView
- CVE-2020-14499Advantech iView, versions 5.6 and prior, has an improper access control vulnerability.Advantech iView
- CVE-2020-14505Advantech iView, versions 5.6 and prior, has an improper neutralization of special elements used in a command (“command injection”) vulnerabAdvantech iView
- CVE-2020-14497Advantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are vulnerable to the use of an attacker-contrAdvantech iView
- CVE-2020-14507Advantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities that could allow an attacker to create/dowAdvantech iView
- CVE-2020-2978Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server.Oracle Database