oracle

10,484 tracked vulnerabilities.

CVE-2020-29505 HIGH
Dell BSAFE <4.1.5-4.5.2 - Info Disclosure
Jul 11, 2022
CVSS 7.1
EPSS 0.01
CVE-2020-26185 HIGH
Dell BSAFE Micro Edition Suite < 4.5.1 - Out-of-bounds Read
Jun 01, 2022
CVSS 7.5
EPSS 0.01
CVE-2020-26184 HIGH
Dell BSAFE Micro Edition Suite < 4.5.1 - Improper Certificate Validation
Jun 01, 2022
CVSS 7.5
EPSS 0.01
CVE-2020-36518 HIGH
jackson-databind < 2.13.0 - Denial of Service via Nested Object Depth
Mar 11, 2022
CVSS 7.5
EPSS 0.05
CVE-2020-27820 MEDIUM
Linux Kernel 2.6.12-5.4.161 - Use-After-Free in Nouveau Postclose Handler
Nov 03, 2021
CVSS 4.7
EPSS 0.00
CVE-2020-35452 HIGH
Apache HTTP Server 2.4.0-2.4.46 - Out-of-bounds Write in mod_auth_digest via Digest Nonce
Jun 10, 2021
CVSS 7.3
EPSS 0.53
CVE-2020-13950 HIGH
Apache HTTP Server 2.4.41-2.4.46 - Denial of Service via Crafted Content-Length and Transfer-Encoding Headers
Jun 10, 2021
CVSS 7.5
EPSS 0.49
CVE-2020-28469 MEDIUM
glob-parent < 5.1.2 - Uncontrolled Resource Consumption
Jun 03, 2021
CVSS 5.3
EPSS 0.05
CVE-2020-6950 MEDIUM NUCLEI
Eclipse Mojarra < 2.3.14 - Path Traversal via loc or con Parameter
Jun 02, 2021
CVSS 6.5
EPSS 0.10
CVE-2020-14340 MEDIUM
XNIO 3.6.0.Beta1-3.8.1.Final - Denial of Service via File Descriptor Leak
Jun 02, 2021
CVSS 5.9
EPSS 0.02
CVE-2020-35198 CRITICAL
Wind River VxWorks 7 - Memory Corruption
May 12, 2021
CVSS 9.8
EPSS 0.03
CVE-2020-13936 HIGH
Apache Velocity Engine < 2.3 - Remote Code Execution via Template Modification
Mar 10, 2021
CVSS 8.8
EPSS 0.23
CVE-2020-27618 MEDIUM
glibc < 2.32 - Denial of Service via Infinite Loop in iconv IBM Encodings
Feb 26, 2021
CVSS 5.5
EPSS 0.01
CVE-2020-27223 MEDIUM
Eclipse Jetty 9.4.6-9.4.36, 10.0.0, 11.0.0 - Denial of Service via Multiple Accept Headers with Quality Parameters
Feb 26, 2021
CVSS 5.2
EPSS 0.78
CVE-2020-11987 HIGH
Apache Batik < 1.13 - Server-Side Request Forgery via NodePickerPanel
Feb 24, 2021
CVSS 8.2
EPSS 0.14
CVE-2020-28491 HIGH
jackson-dataformats-binary < 2.11.4 - Denial of Service via Unchecked Byte Buffer Allocation
Feb 18, 2021
CVSS 7.5
EPSS 0.03
CVE-2020-28500 MEDIUM
lodash < 4.17.21 - Regular Expression Denial of Service via toNumber trim and trimEnd
Feb 15, 2021
CVSS 5.3
EPSS 0.07
CVE-2020-13949 HIGH
Apache Thrift 0.9.3-0.13.0 - Uncontrolled Resource Consumption via Short RPC Messages
Feb 12, 2021
CVSS 7.5
EPSS 0.07
CVE-2020-14343 CRITICAL
PyYAML < 5.4 - Remote Code Execution via Python Object Constructor
Feb 09, 2021
CVSS 9.8
EPSS 0.06
CVE-2020-13947 MEDIUM
Apache ActiveMQ 5.15.12-5.16.0 - Stored Cross-Site Scripting in message.jsp
Feb 08, 2021
CVSS 6.1
EPSS 0.79
CVE-2020-36242 CRITICAL
cryptography < 3.3.2 - Integer Overflow and Buffer Overflow via Symmetric Encryption Update Calls
Feb 07, 2021
CVSS 9.1
EPSS 0.07
CVE-2020-29582 MEDIUM
JetBrains Kotlin <1.4.21 - Info Disclosure
Feb 03, 2021
CVSS 5.3
EPSS 0.03
CVE-2020-28895 HIGH
Wind River VxWorks 6.9-6.9.4.11 - Integer Overflow in Memory Allocator via calloc()
Feb 03, 2021
CVSS 7.3
EPSS 0.02
CVE-2020-9492 HIGH
Apache Hadoop 2.0.0-2.10.0 and 3.0.0-alpha1-3.2.1 - Incorrect Authorization via WebHDFS SPNEGO Header
Jan 26, 2021
CVSS 8.8
EPSS 0.04
CVE-2020-8554 MEDIUM
Kubernetes API Server - Traffic Interception via Service externalIPs
Jan 21, 2021
CVSS 6.3
EPSS 0.09
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV