CVEs published October 21, 2020
245 CVEs were published on October 21, 2020: 10 critical, 69 high. 5 are now in CISA KEV.
- Published
- 245
- Critical
- 10
- High
- 69
- Medium
- 122
- Low
- 20
- Unrated
- 24
- Now in CISA KEV
- 5
- Fix available
- 21
Most affected products
- Oracle MySQL Server
- 48
- Cisco Adaptive Security Appliance (ASA) Software
- 20
- Cisco Firepower Threat Defense Software
- 10
- Cisco Firepower Management Center
- 8
- Oracle Java SE JDK and JRE
- 7
- Oracle PeopleSoft Enterprise PT PeopleTools
- 7
- Oracle Trade Management
- 7
- Oracle VM VirtualBox
- 7
- Oracle WebLogic Server
- 7
- Oracle Database - Enterprise Edition
- 6
Critical 10
- CVE-2020-7750Cross-site Scripting (XSS)scratch-svg-renderer
- CVE-2020-14882Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-14859Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14871Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module).Oracle Solaris Operating System
- CVE-2020-14875Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14876Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14841Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14855Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Oracle Universal Work Queue
- CVE-2020-14825Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14805Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration EngiOracle E-Business Suite Secure Enterprise Search
High 69
- CVE-2020-24423Uncontrolled Search Path in Adobe Media Encoder for WindowsAdobe Media Encoder
- CVE-2020-24424Uncontrolled Search Path in Adobe Premiere Pro for WindowsAdobe Premiere
- CVE-2020-24420Uncontrolled Search Path Element in Adobe Photoshop for WindowsAdobe Photoshop
- CVE-2020-24419Uncontrolled Search Path Element in Adobe After Effects for WindowsAdobe After Effects
- CVE-2020-24418Adobe After Effects Out-of-Bounds Read VulnerabilityAdobe After Effects
- CVE-2020-24425Privilege escalation vulnerability in Dreamweaver version 20.2Adobe Dreamweaver
- CVE-2020-15244RCE in MagentoOpenMage magento-lts · openmage/magento-lts
- CVE-2020-9750Out-of-bounds read vulnerability in Adobe Animate 20.5Adobe Animate
- CVE-2020-9747Double-free vulnerability in Adobe Animate 20.5Adobe Animate
- CVE-2020-9749Out-of-bounds read vulnerability in Adobe Animate 20.5Adobe Animate
- CVE-2020-9748Stack overflow vulnerability in Adobe Animate 20.5Adobe Animate
- CVE-2020-24422Uncontrolled Search Path in Creative Cloud Desktop ApplicationAdobe Creative Cloud
- CVE-2020-3554Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3562Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3563Cisco Firepower Threat Defense Software TCP Flood Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3571Cisco Firepower 4110 ICMP Flood Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3572Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3577Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3304Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3373Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3410Cisco Firepower Management Center Software Common Access Card Authentication Bypass VulnerabilityCisco Firepower Management Center
- CVE-2020-3436Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3456Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3499Cisco Firepower Management Center Software Denial of Service VulnerabilityCisco Firepower Management Center
- CVE-2020-3514Cisco Firepower Threat Defense Software Multi-Instance Container Escape VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3528Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3529Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3533Cisco Firepower Threat Defense Software SNMP Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3549Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash VulnerabilityCisco Firepower Management Center
- CVE-2020-3550Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal VulnerabilityCisco Firepower Management Center
- CVE-2020-15240Regression in JWT Signature Validationomniauth-auth0
- CVE-2020-14878Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Oracle MySQL Server
- CVE-2020-14879Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2020-14880Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO).Oracle BI Publisher
- CVE-2020-14883Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-14857Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14862Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Internal Operations).Oracle Universal Work Queue
- CVE-2020-14863Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-14864Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14865Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection product of Oracle PeopleSoft (component: eSupplier Connection).Oracle PeopleSoft Enterprise SCM eSupplier Connection
- CVE-2020-14872Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14842Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2020-14843Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14849Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14850Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Flex Fields).Oracle CRM Technical Foundation
- CVE-2020-14851Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14856Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14819Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-14820Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-14824Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-14828Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-14831Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14833Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14834Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14835Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14807Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect).Oracle Hospitality Suite8
- CVE-2020-14808Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface).Oracle Trade Management
- CVE-2020-14815Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2020-14816Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14817Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-14780Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security).Oracle BI Publisher
- CVE-2020-14784Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service).Oracle BI Publisher
- CVE-2020-14766Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web AdministrOracle Business Intelligence Enterprise Edition
- CVE-2020-14774Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14734Vulnerability in the Oracle Text component of Oracle Database Server.Oracle Text
- CVE-2020-14735Vulnerability in the Scheduler component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-10139Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.Acronis True Image
- CVE-2020-10140Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory.Acronis True Image
- CVE-2020-10138Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within CAcronis Cyber Backup · Acronis Cyber Protect
Medium, low and unrated 166
- CVE-2020-17355Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denia
- CVE-2020-17454WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface.
- CVE-2020-24421Adobe InDesign 15.1.2 NULL Pointer Dereference BugAdobe InDesign
- CVE-2020-15266Undefined behavior in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2020-15265Segfault in Tensorflowtensorflow · tensorflow-cpu +1
- CVE-2020-27615The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer_login_failed and lz_valid_ip
- CVE-2020-27344The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.
- CVE-2020-3555Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3557Cisco Firepower Management Center Software Denial of Service VulnerabilityCisco Firepower Management Center
- CVE-2020-3558Cisco Firepower Management Center Software Open Redirect VulnerabilityCisco Firepower Management Center
- CVE-2020-3561Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3564Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3565Cisco Firepower Threat Defense Software TCP Intercept Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3578Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3580Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3581Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3599Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3585Cisco Firepower 1000 Series Bleichenbacher Attack VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3583Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3582Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3317Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3352Cisco Firepower Threat Defense Software Hidden Commands VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3455Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass VulnerabilityCisco Firepower Extensible Operating System
- CVE-2020-3457Cisco FXOS Software Command Injection VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3458Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3459Cisco FXOS Software for Firepower 4100/9300 Series Command Injection VulnerabilityCisco Firepower Extensible Operating System
- CVE-2020-3515Cisco Firepower Management Center Software Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2020-3553Cisco Firepower Management Center Software Cross-Site Scripting VulnerabilitiesCisco Firepower Management Center
- CVE-2020-3299Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2018-11764Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0.Apache Hadoop · org.apache.hadoop:hadoop-main
- CVE-2020-5651SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a speTips and Tricks HQ Simple Download Monitor
- CVE-2020-5650Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via unTips and Tricks HQ Simple Download Monitor
- CVE-2020-27601In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats.
- CVE-2020-27603BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files.
- CVE-2020-27604BigBlueButton before 2.3 does not implement LibreOffice sandboxing.
- CVE-2020-27605BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related t
- CVE-2020-27607In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data fro
- CVE-2020-27609BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface.
- CVE-2020-27611BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint.
- CVE-2020-27613The installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the FreeSWITCH password, which allows local users to
- CVE-2020-27612Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a r
- CVE-2020-27610The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external interfaces, and does not
- CVE-2020-27608In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as
- CVE-2020-27606BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which makes it easier for
- CVE-2020-27602BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authToken.
- CVE-2020-6648A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2.Fortinet FortiGate and FortiProxy
- CVE-2020-14895Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide).Oracle Utilities Framework
- CVE-2020-14896Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-14897Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login).Oracle FLEXCUBE Direct Banking
- CVE-2020-14898Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server.Oracle Application Express
- CVE-2020-14899Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server.Oracle Application Express
- CVE-2020-14900Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server.Oracle Application Express
- CVE-2020-14901Vulnerability in the RDBMS Security component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-14877Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging).Oracle Hospitality OPERA 5 Property Services
- CVE-2020-14881Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14884Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14885Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14886Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14887Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-14888Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14889Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14890Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login).Oracle FLEXCUBE Direct Banking
- CVE-2020-14891Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14892Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-14893Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14894Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-14858Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging).Oracle Hospitality OPERA 5 Property Services
- CVE-2020-14860Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles).Oracle MySQL Server
- CVE-2020-14861Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14866Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14867Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2020-14868Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14869Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Oracle MySQL Server
- CVE-2020-14870Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin).Oracle MySQL Server
- CVE-2020-14873Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging).Oracle MySQL Server
- CVE-2020-14838Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-14839Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14840Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics).Oracle Application Object Library
- CVE-2020-14844Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2020-14845Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14846Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14847Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14848Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14852Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets).Oracle MySQL Server
- CVE-2020-14853Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin).Oracle MySQL Cluster
- CVE-2020-14854Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: UI and Visualization).Oracle Hyperion Infrastructure Technology
- CVE-2020-14821Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14822Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs).Oracle Installed Base
- CVE-2020-14823Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-14826Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions).Oracle Applications Manager
- CVE-2020-14827Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Oracle MySQL Server
- CVE-2020-14829Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14830Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14832Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14836Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14837Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14799Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2020-14800Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).Oracle MySQL Server
- CVE-2020-14801Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14802Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14803Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE · Oracle GraalVM Enterprise Edit…
- CVE-2020-14804Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).Oracle MySQL Server
- CVE-2020-14806Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14809Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14810Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect).Oracle Hospitality Suite8
- CVE-2020-14811Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP EBS Integration).Oracle Applications Manager
- CVE-2020-14812Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking).Oracle MySQL Server
- CVE-2020-14813Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Grids).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14814Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-14818Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility).Oracle Solaris Operating System
- CVE-2020-14781Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI).Oracle Java SE JDK and JRE
- CVE-2020-14782Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2020-14783Vulnerability in the Oracle Hospitality RES 3700 product of Oracle Food and Beverage Applications (component: CAL).Oracle Hospitality RES
- CVE-2020-14785Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14786Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2020-14787Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface).Oracle Communications Diameter Signaling Router
- CVE-2020-14788Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface).Oracle Communications Diameter Signaling Router
- CVE-2020-14789Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).Oracle MySQL Server
- CVE-2020-14790Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2020-14791Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14792Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot).Oracle Java SE JDK and JRE
- CVE-2020-14793Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14794Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14795Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-14796Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2020-14797Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2020-14798Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java SE JDK and JRE
- CVE-2020-14761Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2020-14762Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-14763Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server.Oracle Application Express
- CVE-2020-14764Vulnerability in the Hyperion Planning product of Oracle Hyperion (component: Application Development Framework).Oracle Hyperion Planning
- CVE-2020-14765Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS).Oracle MySQL Server
- CVE-2020-14767Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service).Oracle Hyperion BI+
- CVE-2020-14768Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: Smart View Provider).Oracle Hyperion Analytic Provider Services
- CVE-2020-14769Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14770Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service).Oracle Hyperion BI+
- CVE-2020-14771Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Oracle MySQL Server
- CVE-2020-14772Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services).Oracle Hyperion Lifecycle Management
- CVE-2020-14773Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14775Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14776Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-14777Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-14778Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise HCM Global Payroll Core
- CVE-2020-14779Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java SE JDK and JRE
- CVE-2020-14672Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2020-14731Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: SegmentOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-14732Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: PromotiOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-14736Vulnerability in the Database Vault component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-14740Vulnerability in the SQL Developer Install component of Oracle Database Server.Oracle SQL Developer
- CVE-2020-14741Vulnerability in the Database Filesystem component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-14742Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-14743Vulnerability in the Java VM component of Oracle Database Server.Oracle Database - Enterprise Edition
- CVE-2020-14744Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General).Oracle REST Data Services
- CVE-2020-14745Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General).Oracle REST Data Services
- CVE-2020-14746Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows).Oracle Applications Framework
- CVE-2020-14752Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services).Oracle Hyperion Lifecycle Management
- CVE-2020-14753Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation).Oracle Hospitality Reporting and Analytics
- CVE-2020-14754Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2020-14757Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2020-14758Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2020-14759Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2020-14760Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-25820BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document th
- CVE-2020-26896Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database.
- CVE-2020-26895Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid loca
- CVE-2020-17381An issue was discovered in Ghisler Total Commander 9.51.