# CVEs published 2020-10-21

245 CVEs were published on October 21, 2020: 10 critical, 69 high. 5 are now in CISA KEV. Days are UTC.

- [CVE-2020-17355](https://cve.now/CVE-2020-17355.md): Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denia (no CVSS)
- [CVE-2020-17454](https://cve.now/CVE-2020-17454.md): WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. (no CVSS)
- [CVE-2020-24421](https://cve.now/CVE-2020-24421.md): Adobe InDesign 15.1.2 NULL Pointer Dereference Bug (CVSS 5.5, Adobe InDesign)
- [CVE-2020-24423](https://cve.now/CVE-2020-24423.md): Uncontrolled Search Path in Adobe Media Encoder for Windows (CVSS 7.0, Adobe Media Encoder)
- [CVE-2020-24424](https://cve.now/CVE-2020-24424.md): Uncontrolled Search Path in Adobe Premiere Pro for Windows (CVSS 7.0, Adobe Premiere)
- [CVE-2020-24420](https://cve.now/CVE-2020-24420.md): Uncontrolled Search Path Element in Adobe Photoshop for Windows (CVSS 7.0, Adobe Photoshop)
- [CVE-2020-15266](https://cve.now/CVE-2020-15266.md): Undefined behavior in Tensorflow (CVSS 3.7, tensorflow · tensorflow-cpu +1)
- [CVE-2020-15265](https://cve.now/CVE-2020-15265.md): Segfault in Tensorflow (CVSS 5.9, tensorflow · tensorflow-cpu +1)
- [CVE-2020-24419](https://cve.now/CVE-2020-24419.md): Uncontrolled Search Path Element in Adobe After Effects for Windows (CVSS 7.0, Adobe After Effects)
- [CVE-2020-24418](https://cve.now/CVE-2020-24418.md): Adobe After Effects Out-of-Bounds Read Vulnerability (CVSS 7.8, Adobe After Effects)
- [CVE-2020-27615](https://cve.now/CVE-2020-27615.md): The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant XSS), related to loginizer\_login\_failed and lz\_valid\_ip (no CVSS)
- [CVE-2020-24425](https://cve.now/CVE-2020-24425.md): Privilege escalation vulnerability in Dreamweaver version 20.2 (CVSS 7.5, Adobe Dreamweaver)
- [CVE-2020-15244](https://cve.now/CVE-2020-15244.md): RCE in Magento (CVSS 8.0, OpenMage magento-lts · openmage/magento-lts)
- [CVE-2020-9750](https://cve.now/CVE-2020-9750.md): Out-of-bounds read vulnerability in Adobe Animate 20.5 (CVSS 7.8, Adobe Animate)
- [CVE-2020-9747](https://cve.now/CVE-2020-9747.md): Double-free vulnerability in Adobe Animate 20.5 (CVSS 7.8, Adobe Animate)
- [CVE-2020-9749](https://cve.now/CVE-2020-9749.md): Out-of-bounds read vulnerability in Adobe Animate 20.5 (CVSS 7.8, Adobe Animate)
- [CVE-2020-9748](https://cve.now/CVE-2020-9748.md): Stack overflow vulnerability in Adobe Animate 20.5 (CVSS 7.8, Adobe Animate)
- [CVE-2020-24422](https://cve.now/CVE-2020-24422.md): Uncontrolled Search Path in Creative Cloud Desktop Application (CVSS 7.0, Adobe Creative Cloud)
- [CVE-2020-27344](https://cve.now/CVE-2020-27344.md): The cm-download-manager plugin before 2.8.0 for WordPress allows XSS. (no CVSS)
- [CVE-2020-3554](https://cve.now/CVE-2020-3554.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3555](https://cve.now/CVE-2020-3555.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SIP Denial of Service Vulnerability (CVSS 6.8, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3557](https://cve.now/CVE-2020-3557.md): Cisco Firepower Management Center Software Denial of Service Vulnerability (CVSS 5.3, Cisco Firepower Management Center)
- [CVE-2020-3558](https://cve.now/CVE-2020-3558.md): Cisco Firepower Management Center Software Open Redirect Vulnerability (CVSS 4.7, Cisco Firepower Management Center)
- [CVE-2020-3561](https://cve.now/CVE-2020-3561.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability (CVSS 4.7, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3562](https://cve.now/CVE-2020-3562.md): Cisco Firepower 2100 Series SSL/TLS Inspection Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2020-3563](https://cve.now/CVE-2020-3563.md): Cisco Firepower Threat Defense Software TCP Flood Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2020-3564](https://cve.now/CVE-2020-3564.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software FTP Inspection Bypass Vulnerability (CVSS 5.8, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3565](https://cve.now/CVE-2020-3565.md): Cisco Firepower Threat Defense Software TCP Intercept Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2020-3571](https://cve.now/CVE-2020-3571.md): Cisco Firepower 4110 ICMP Flood Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2020-3572](https://cve.now/CVE-2020-3572.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Session Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3577](https://cve.now/CVE-2020-3577.md): Cisco Firepower Threat Defense Software Inline Pair/Passive Mode Denial of Service Vulnerability (CVSS 7.4, Cisco Firepower Threat Defense Software)
- [CVE-2020-3578](https://cve.now/CVE-2020-3578.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN Portal Access Rule Bypass Vulnerability (CVSS 5.3, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3580](https://cve.now/CVE-2020-3580.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities (CVSS 6.1, KEV, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3581](https://cve.now/CVE-2020-3581.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities (CVSS 6.1, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3599](https://cve.now/CVE-2020-3599.md): Cisco Adaptive Security Appliance Software Web-Based Management Interface Reflected Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3585](https://cve.now/CVE-2020-3585.md): Cisco Firepower 1000 Series Bleichenbacher Attack Vulnerability (CVSS 5.3, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3583](https://cve.now/CVE-2020-3583.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities (CVSS 6.1, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3582](https://cve.now/CVE-2020-3582.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerabilities (CVSS 6.1, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3304](https://cve.now/CVE-2020-3304.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3317](https://cve.now/CVE-2020-3317.md): Cisco Firepower Threat Defense Software SSL Input Validation Denial of Service Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2020-3352](https://cve.now/CVE-2020-3352.md): Cisco Firepower Threat Defense Software Hidden Commands Vulnerability (CVSS 5.3, Cisco Firepower Threat Defense Software)
- [CVE-2020-3373](https://cve.now/CVE-2020-3373.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IP Fragment Memory Leak Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3410](https://cve.now/CVE-2020-3410.md): Cisco Firepower Management Center Software Common Access Card Authentication Bypass Vulnerability (CVSS 8.1, Cisco Firepower Management Center)
- [CVE-2020-3436](https://cve.now/CVE-2020-3436.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services File Upload Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3455](https://cve.now/CVE-2020-3455.md): Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability (CVSS 6.7, Cisco Firepower Extensible Operating System)
- [CVE-2020-3456](https://cve.now/CVE-2020-3456.md): Cisco FXOS Software Firepower Chassis Manager Cross-Site Request Forgery Vulnerability (CVSS 8.8, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3457](https://cve.now/CVE-2020-3457.md): Cisco FXOS Software Command Injection Vulnerability (CVSS 6.7, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3458](https://cve.now/CVE-2020-3458.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities (CVSS 6.7, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3459](https://cve.now/CVE-2020-3459.md): Cisco FXOS Software for Firepower 4100/9300 Series Command Injection Vulnerability (CVSS 6.7, Cisco Firepower Extensible Operating System)
- [CVE-2020-3499](https://cve.now/CVE-2020-3499.md): Cisco Firepower Management Center Software Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Management Center)
- [CVE-2020-3514](https://cve.now/CVE-2020-3514.md): Cisco Firepower Threat Defense Software Multi-Instance Container Escape Vulnerability (CVSS 8.2, Cisco Firepower Threat Defense Software)
- [CVE-2020-3515](https://cve.now/CVE-2020-3515.md): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2020-3528](https://cve.now/CVE-2020-3528.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPFv2 Link-Local Signaling Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3529](https://cve.now/CVE-2020-3529.md): Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL VPN Direct Memory Access Denial of Service Vulnerability (CVSS 8.6, Cisco Adaptive Security Appliance (ASA) Software)
- [CVE-2020-3533](https://cve.now/CVE-2020-3533.md): Cisco Firepower Threat Defense Software SNMP Denial of Service Vulnerability (CVSS 8.6, Cisco Firepower Threat Defense Software)
- [CVE-2020-3549](https://cve.now/CVE-2020-3549.md): Cisco Firepower Management Center Software and Firepower Threat Defense Software sftunnel Pass the Hash Vulnerability (CVSS 8.1, Cisco Firepower Management Center)
- [CVE-2020-3550](https://cve.now/CVE-2020-3550.md): Cisco Firepower Management Center Software and Firepower Threat Defense Software Directory Traversal Vulnerability (CVSS 8.1, Cisco Firepower Management Center)
- [CVE-2020-3553](https://cve.now/CVE-2020-3553.md): Cisco Firepower Management Center Software Cross-Site Scripting Vulnerabilities (CVSS 4.8, Cisco Firepower Management Center)
- [CVE-2020-3299](https://cve.now/CVE-2020-3299.md): Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability (CVSS 5.8, Cisco Firepower Threat Defense Software)
- [CVE-2018-11764](https://cve.now/CVE-2018-11764.md): Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. (no CVSS, Apache Hadoop · org.apache.hadoop:hadoop-main)
- [CVE-2020-15240](https://cve.now/CVE-2020-15240.md): Regression in JWT Signature Validation (CVSS 7.4, omniauth-auth0)
- [CVE-2020-7750](https://cve.now/CVE-2020-7750.md): Cross-site Scripting (XSS) (CVSS 9.6, scratch-svg-renderer)
- [CVE-2020-5651](https://cve.now/CVE-2020-5651.md): SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a spe (no CVSS, Tips and Tricks HQ Simple Download Monitor)
- [CVE-2020-5650](https://cve.now/CVE-2020-5650.md): Cross-site scripting vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to inject an arbitrary script via un (no CVSS, Tips and Tricks HQ Simple Download Monitor)
- [CVE-2020-27601](https://cve.now/CVE-2020-27601.md): In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. (no CVSS)
- [CVE-2020-27603](https://cve.now/CVE-2020-27603.md): BigBlueButton before 2.2.27 has an unsafe JODConverter setting in which LibreOffice document conversions can access external files. (no CVSS)
- [CVE-2020-27604](https://cve.now/CVE-2020-27604.md): BigBlueButton before 2.3 does not implement LibreOffice sandboxing. (no CVSS)
- [CVE-2020-27605](https://cve.now/CVE-2020-27605.md): BigBlueButton through 2.2.28 uses Ghostscript for processing of uploaded EPS documents, and consequently may be subject to attacks related t (no CVSS)
- [CVE-2020-27607](https://cve.now/CVE-2020-27607.md): In BigBlueButton before 2.2.28 (or earlier), the client-side Mute button only signifies that the server should stop accepting audio data fro (no CVSS)
- [CVE-2020-27609](https://cve.now/CVE-2020-27609.md): BigBlueButton through 2.2.28 records a video meeting despite the deactivation of video recording in the user interface. (no CVSS)
- [CVE-2020-27611](https://cve.now/CVE-2020-27611.md): BigBlueButton through 2.2.28 uses STUN/TURN resources from a third party, which may represent an unintended endpoint. (no CVSS)
- [CVE-2020-27613](https://cve.now/CVE-2020-27613.md): The installation procedure in BigBlueButton before 2.2.28 (or earlier) uses ClueCon as the FreeSWITCH password, which allows local users to (no CVSS)
- [CVE-2020-27612](https://cve.now/CVE-2020-27612.md): Greenlight in BigBlueButton through 2.2.28 places usernames in room URLs, which may represent an unintended information leak to users in a r (no CVSS)
- [CVE-2020-27610](https://cve.now/CVE-2020-27610.md): The installation procedure in BigBlueButton before 2.2.28 (or earlier) exposes certain network services to external interfaces, and does not (no CVSS)
- [CVE-2020-27608](https://cve.now/CVE-2020-27608.md): In BigBlueButton before 2.2.28 (or earlier), uploaded presentations are sent to clients without a Content-Type header, which allows XSS, as (no CVSS)
- [CVE-2020-27606](https://cve.now/CVE-2020-27606.md): BigBlueButton before 2.2.28 (or earlier) does not set the secure flag for the session cookie in an https session, which makes it easier for (no CVSS)
- [CVE-2020-27602](https://cve.now/CVE-2020-27602.md): BigBlueButton before 2.2.7 does not have a protection mechanism for separator injection in meetingId, userId, and authToken. (no CVSS)
- [CVE-2020-6648](https://cve.now/CVE-2020-6648.md): A cleartext storage of sensitive information vulnerability in FortiOS command line interface in versions 6.2.4 and earlier and FortiProxy 2. (CVSS 5.3, Fortinet FortiGate and FortiProxy)
- [CVE-2020-14895](https://cve.now/CVE-2020-14895.md): Vulnerability in the Oracle Utilities Framework product of Oracle Utilities Applications (component: System Wide). (CVSS 5.4, Oracle Utilities Framework)
- [CVE-2020-14896](https://cve.now/CVE-2020-14896.md): Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Payments)
- [CVE-2020-14897](https://cve.now/CVE-2020-14897.md): Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). (CVSS 6.5, Oracle FLEXCUBE Direct Banking)
- [CVE-2020-14898](https://cve.now/CVE-2020-14898.md): Vulnerability in the Oracle Application Express Packaged Apps component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-14899](https://cve.now/CVE-2020-14899.md): Vulnerability in the Oracle Application Express Data Reporter component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-14900](https://cve.now/CVE-2020-14900.md): Vulnerability in the Oracle Application Express Group Calendar component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-14901](https://cve.now/CVE-2020-14901.md): Vulnerability in the RDBMS Security component of Oracle Database Server. (CVSS 4.9, Oracle Database - Enterprise Edition)
- [CVE-2020-14877](https://cve.now/CVE-2020-14877.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). (CVSS 6.5, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-14878](https://cve.now/CVE-2020-14878.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). (CVSS 8.0, Oracle MySQL Server)
- [CVE-2020-14879](https://cve.now/CVE-2020-14879.md): Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 8.5, Oracle BI Publisher)
- [CVE-2020-14880](https://cve.now/CVE-2020-14880.md): Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). (CVSS 8.5, Oracle BI Publisher)
- [CVE-2020-14881](https://cve.now/CVE-2020-14881.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14882](https://cve.now/CVE-2020-14882.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-14883](https://cve.now/CVE-2020-14883.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 7.2, KEV, Oracle WebLogic Server)
- [CVE-2020-14884](https://cve.now/CVE-2020-14884.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14885](https://cve.now/CVE-2020-14885.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14886](https://cve.now/CVE-2020-14886.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14887](https://cve.now/CVE-2020-14887.md): Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). (CVSS 6.5, Oracle FLEXCUBE Universal Banking)
- [CVE-2020-14888](https://cve.now/CVE-2020-14888.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14889](https://cve.now/CVE-2020-14889.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-14890](https://cve.now/CVE-2020-14890.md): Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). (CVSS 6.5, Oracle FLEXCUBE Direct Banking)
- [CVE-2020-14891](https://cve.now/CVE-2020-14891.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14892](https://cve.now/CVE-2020-14892.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 5.5, Oracle VM VirtualBox)
- [CVE-2020-14893](https://cve.now/CVE-2020-14893.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14894](https://cve.now/CVE-2020-14894.md): Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). (CVSS 6.5, Oracle Banking Corporate Lending)
- [CVE-2020-14857](https://cve.now/CVE-2020-14857.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14858](https://cve.now/CVE-2020-14858.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Logging). (CVSS 6.8, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2020-14859](https://cve.now/CVE-2020-14859.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14860](https://cve.now/CVE-2020-14860.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). (CVSS 2.7, Oracle MySQL Server)
- [CVE-2020-14861](https://cve.now/CVE-2020-14861.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14862](https://cve.now/CVE-2020-14862.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Internal Operations). (CVSS 8.8, Oracle Universal Work Queue)
- [CVE-2020-14863](https://cve.now/CVE-2020-14863.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-14864](https://cve.now/CVE-2020-14864.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). (CVSS 7.5, KEV, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14865](https://cve.now/CVE-2020-14865.md): Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection product of Oracle PeopleSoft (component: eSupplier Connection). (CVSS 8.1, Oracle PeopleSoft Enterprise SCM eSupplier Connection)
- [CVE-2020-14866](https://cve.now/CVE-2020-14866.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14867](https://cve.now/CVE-2020-14867.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-14868](https://cve.now/CVE-2020-14868.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14869](https://cve.now/CVE-2020-14869.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14870](https://cve.now/CVE-2020-14870.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14871](https://cve.now/CVE-2020-14871.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). (CVSS 10.0, KEV, Oracle Solaris Operating System)
- [CVE-2020-14872](https://cve.now/CVE-2020-14872.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-14873](https://cve.now/CVE-2020-14873.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-14875](https://cve.now/CVE-2020-14875.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 9.1, Oracle Marketing)
- [CVE-2020-14876](https://cve.now/CVE-2020-14876.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 9.1, Oracle Trade Management)
- [CVE-2020-14838](https://cve.now/CVE-2020-14838.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.3, Oracle MySQL Server)
- [CVE-2020-14839](https://cve.now/CVE-2020-14839.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14840](https://cve.now/CVE-2020-14840.md): Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). (CVSS 4.7, Oracle Application Object Library)
- [CVE-2020-14841](https://cve.now/CVE-2020-14841.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14842](https://cve.now/CVE-2020-14842.md): Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 8.2, Oracle BI Publisher)
- [CVE-2020-14843](https://cve.now/CVE-2020-14843.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 7.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14844](https://cve.now/CVE-2020-14844.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14845](https://cve.now/CVE-2020-14845.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14846](https://cve.now/CVE-2020-14846.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14847](https://cve.now/CVE-2020-14847.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 2.7, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14848](https://cve.now/CVE-2020-14848.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14849](https://cve.now/CVE-2020-14849.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-14850](https://cve.now/CVE-2020-14850.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Flex Fields). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-14851](https://cve.now/CVE-2020-14851.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14852](https://cve.now/CVE-2020-14852.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14853](https://cve.now/CVE-2020-14853.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin). (CVSS 4.6, Oracle MySQL Cluster)
- [CVE-2020-14854](https://cve.now/CVE-2020-14854.md): Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion (component: UI and Visualization). (CVSS 6.1, Oracle Hyperion Infrastructure Technology)
- [CVE-2020-14855](https://cve.now/CVE-2020-14855.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). (CVSS 9.8, Oracle Universal Work Queue)
- [CVE-2020-14856](https://cve.now/CVE-2020-14856.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14819](https://cve.now/CVE-2020-14819.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-14820](https://cve.now/CVE-2020-14820.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-14821](https://cve.now/CVE-2020-14821.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14822](https://cve.now/CVE-2020-14822.md): Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). (CVSS 4.7, Oracle Installed Base)
- [CVE-2020-14823](https://cve.now/CVE-2020-14823.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 6.5, Oracle CRM Technical Foundation)
- [CVE-2020-14824](https://cve.now/CVE-2020-14824.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (com (CVSS 8.6, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-14825](https://cve.now/CVE-2020-14825.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-14826](https://cve.now/CVE-2020-14826.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: SQL Extensions). (CVSS 5.3, Oracle Applications Manager)
- [CVE-2020-14827](https://cve.now/CVE-2020-14827.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14828](https://cve.now/CVE-2020-14828.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 7.2, Oracle MySQL Server)
- [CVE-2020-14829](https://cve.now/CVE-2020-14829.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14830](https://cve.now/CVE-2020-14830.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14831](https://cve.now/CVE-2020-14831.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-14832](https://cve.now/CVE-2020-14832.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14833](https://cve.now/CVE-2020-14833.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14834](https://cve.now/CVE-2020-14834.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14835](https://cve.now/CVE-2020-14835.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-14836](https://cve.now/CVE-2020-14836.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14837](https://cve.now/CVE-2020-14837.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14799](https://cve.now/CVE-2020-14799.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14800](https://cve.now/CVE-2020-14800.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14801](https://cve.now/CVE-2020-14801.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14802](https://cve.now/CVE-2020-14802.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14803](https://cve.now/CVE-2020-14803.md): Vulnerability in the Java SE product of Oracle Java SE (component: Libraries). (CVSS 5.3, Oracle Java SE JDK and JRE · Oracle GraalVM Enterprise Edit…)
- [CVE-2020-14804](https://cve.now/CVE-2020-14804.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14805](https://cve.now/CVE-2020-14805.md): Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Search Integration Engi (CVSS 9.1, Oracle E-Business Suite Secure Enterprise Search)
- [CVE-2020-14806](https://cve.now/CVE-2020-14806.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14807](https://cve.now/CVE-2020-14807.md): Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect). (CVSS 7.1, Oracle Hospitality Suite8)
- [CVE-2020-14808](https://cve.now/CVE-2020-14808.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-14809](https://cve.now/CVE-2020-14809.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14810](https://cve.now/CVE-2020-14810.md): Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect). (CVSS 5.4, Oracle Hospitality Suite8)
- [CVE-2020-14811](https://cve.now/CVE-2020-14811.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: AMP EBS Integration). (CVSS 5.3, Oracle Applications Manager)
- [CVE-2020-14812](https://cve.now/CVE-2020-14812.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14813](https://cve.now/CVE-2020-14813.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Grids). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14814](https://cve.now/CVE-2020-14814.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14815](https://cve.now/CVE-2020-14815.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). (CVSS 8.2, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14816](https://cve.now/CVE-2020-14816.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-14817](https://cve.now/CVE-2020-14817.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-14818](https://cve.now/CVE-2020-14818.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). (CVSS 3.0, Oracle Solaris Operating System)
- [CVE-2020-14780](https://cve.now/CVE-2020-14780.md): Vulnerability in the BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). (CVSS 7.1, Oracle BI Publisher)
- [CVE-2020-14781](https://cve.now/CVE-2020-14781.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2020-14782](https://cve.now/CVE-2020-14782.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2020-14783](https://cve.now/CVE-2020-14783.md): Vulnerability in the Oracle Hospitality RES 3700 product of Oracle Food and Beverage Applications (component: CAL). (CVSS 5.3, Oracle Hospitality RES)
- [CVE-2020-14784](https://cve.now/CVE-2020-14784.md): Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Mobile Service). (CVSS 8.2, Oracle BI Publisher)
- [CVE-2020-14785](https://cve.now/CVE-2020-14785.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14786](https://cve.now/CVE-2020-14786.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14787](https://cve.now/CVE-2020-14787.md): Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface). (CVSS 5.4, Oracle Communications Diameter Signaling Router)
- [CVE-2020-14788](https://cve.now/CVE-2020-14788.md): Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) product of Oracle Communications (component: User Interface). (CVSS 6.1, Oracle Communications Diameter Signaling Router)
- [CVE-2020-14789](https://cve.now/CVE-2020-14789.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14790](https://cve.now/CVE-2020-14790.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14791](https://cve.now/CVE-2020-14791.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 2.2, Oracle MySQL Server)
- [CVE-2020-14792](https://cve.now/CVE-2020-14792.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot). (CVSS 4.2, Oracle Java SE JDK and JRE)
- [CVE-2020-14793](https://cve.now/CVE-2020-14793.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14794](https://cve.now/CVE-2020-14794.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14795](https://cve.now/CVE-2020-14795.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). (CVSS 6.5, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-14796](https://cve.now/CVE-2020-14796.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2020-14797](https://cve.now/CVE-2020-14797.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2020-14798](https://cve.now/CVE-2020-14798.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 3.1, Oracle Java SE JDK and JRE)
- [CVE-2020-14761](https://cve.now/CVE-2020-14761.md): Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). (CVSS 6.5, Oracle Applications Manager)
- [CVE-2020-14762](https://cve.now/CVE-2020-14762.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-14763](https://cve.now/CVE-2020-14763.md): Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. (CVSS 5.4, Oracle Application Express)
- [CVE-2020-14764](https://cve.now/CVE-2020-14764.md): Vulnerability in the Hyperion Planning product of Oracle Hyperion (component: Application Development Framework). (CVSS 4.2, Oracle Hyperion Planning)
- [CVE-2020-14765](https://cve.now/CVE-2020-14765.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14766](https://cve.now/CVE-2020-14766.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Administr (CVSS 7.1, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-14767](https://cve.now/CVE-2020-14767.md): Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service). (CVSS 4.2, Oracle Hyperion BI+)
- [CVE-2020-14768](https://cve.now/CVE-2020-14768.md): Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: Smart View Provider). (CVSS 4.3, Oracle Hyperion Analytic Provider Services)
- [CVE-2020-14769](https://cve.now/CVE-2020-14769.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14770](https://cve.now/CVE-2020-14770.md): Vulnerability in the Hyperion BI+ product of Oracle Hyperion (component: IQR-Foundation service). (CVSS 2.0, Oracle Hyperion BI+)
- [CVE-2020-14771](https://cve.now/CVE-2020-14771.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). (CVSS 2.2, Oracle MySQL Server)
- [CVE-2020-14772](https://cve.now/CVE-2020-14772.md): Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services). (CVSS 4.2, Oracle Hyperion Lifecycle Management)
- [CVE-2020-14773](https://cve.now/CVE-2020-14773.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14774](https://cve.now/CVE-2020-14774.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 7.5, Oracle CRM Technical Foundation)
- [CVE-2020-14775](https://cve.now/CVE-2020-14775.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-14776](https://cve.now/CVE-2020-14776.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14777](https://cve.now/CVE-2020-14777.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14778](https://cve.now/CVE-2020-14778.md): Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Security). (CVSS 6.3, Oracle PeopleSoft Enterprise HCM Global Payroll Core)
- [CVE-2020-14779](https://cve.now/CVE-2020-14779.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java SE JDK and JRE)
- [CVE-2020-14672](https://cve.now/CVE-2020-14672.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-14731](https://cve.now/CVE-2020-14731.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment (CVSS 3.1, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-14732](https://cve.now/CVE-2020-14732.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promoti (CVSS 3.1, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-14734](https://cve.now/CVE-2020-14734.md): Vulnerability in the Oracle Text component of Oracle Database Server. (CVSS 8.1, Oracle Text)
- [CVE-2020-14735](https://cve.now/CVE-2020-14735.md): Vulnerability in the Scheduler component of Oracle Database Server. (CVSS 8.8, Oracle Database - Enterprise Edition)
- [CVE-2020-14736](https://cve.now/CVE-2020-14736.md): Vulnerability in the Database Vault component of Oracle Database Server. (CVSS 3.8, Oracle Database - Enterprise Edition)
- [CVE-2020-14740](https://cve.now/CVE-2020-14740.md): Vulnerability in the SQL Developer Install component of Oracle Database Server. (CVSS 2.8, Oracle SQL Developer)
- [CVE-2020-14741](https://cve.now/CVE-2020-14741.md): Vulnerability in the Database Filesystem component of Oracle Database Server. (CVSS 4.9, Oracle Database - Enterprise Edition)
- [CVE-2020-14742](https://cve.now/CVE-2020-14742.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 2.7, Oracle Database - Enterprise Edition)
- [CVE-2020-14743](https://cve.now/CVE-2020-14743.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 3.1, Oracle Database - Enterprise Edition)
- [CVE-2020-14744](https://cve.now/CVE-2020-14744.md): Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). (CVSS 6.5, Oracle REST Data Services)
- [CVE-2020-14745](https://cve.now/CVE-2020-14745.md): Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General). (CVSS 4.3, Oracle REST Data Services)
- [CVE-2020-14746](https://cve.now/CVE-2020-14746.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popup windows). (CVSS 4.7, Oracle Applications Framework)
- [CVE-2020-14752](https://cve.now/CVE-2020-14752.md): Vulnerability in the Hyperion Lifecycle Management product of Oracle Hyperion (component: Shared Services). (CVSS 4.2, Oracle Hyperion Lifecycle Management)
- [CVE-2020-14753](https://cve.now/CVE-2020-14753.md): Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Installation). (CVSS 5.9, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-14754](https://cve.now/CVE-2020-14754.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). (CVSS 5.5, Oracle Solaris Operating System)
- [CVE-2020-14757](https://cve.now/CVE-2020-14757.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 6.8, Oracle WebLogic Server)
- [CVE-2020-14758](https://cve.now/CVE-2020-14758.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 5.6, Oracle Solaris Operating System)
- [CVE-2020-14759](https://cve.now/CVE-2020-14759.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). (CVSS 2.5, Oracle Solaris Operating System)
- [CVE-2020-14760](https://cve.now/CVE-2020-14760.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2020-10139](https://cve.now/CVE-2020-10139.md): Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\\jenkins\_agent\\. (CVSS 7.8, Acronis True Image)
- [CVE-2020-10140](https://cve.now/CVE-2020-10140.md): Acronis True Image 2021 fails to properly set ACLs of the C:\\ProgramData\\Acronis directory. (CVSS 7.8, Acronis True Image)
- [CVE-2020-10138](https://cve.now/CVE-2020-10138.md): Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C (CVSS 7.8, Acronis Cyber Backup · Acronis Cyber Protect)
- [CVE-2020-25820](https://cve.now/CVE-2020-25820.md): BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document th (no CVSS)
- [CVE-2020-26896](https://cve.now/CVE-2020-26896.md): Prior to 0.11.0-beta, LND (Lightning Network Daemon) had a vulnerability in its invoice database. (no CVSS)
- [CVE-2020-26895](https://cve.now/CVE-2020-26895.md): Prior to 0.10.0-beta, LND (Lightning Network Daemon) would have accepted a counterparty high-S signature and broadcast tx-relay invalid loca (no CVSS)
- [CVE-2020-17381](https://cve.now/CVE-2020-17381.md): An issue was discovered in Ghisler Total Commander 9.51. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.