oracle

10,484 tracked vulnerabilities.

CVE-2020-14756 CRITICAL
Oracle Coherence <=14.1.1.0.0 - Unauthenticated Remote Code Execution via IIOP/T3
Jan 20, 2021
CVSS 9.8
EPSS 0.75
CVE-2020-25659 MEDIUM
python-cryptography <3.2 - Timing Attack
Jan 11, 2021
CVSS 5.9
EPSS 0.02
CVE-2020-36183 HIGH
FasterXML jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data
Jan 07, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36182 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data
Jan 07, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36180 HIGH
Netapp Cloud Backup < 21.1.2 - Insecure Deserialization
Jan 07, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36179 HIGH
Oracle JD Edwards Enterpriseone Tools - Insecure Deserialization
Jan 07, 2021
CVSS 8.1
EPSS 0.21
CVE-2020-36189 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data
Jan 06, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36188 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data via JNDIConnectionSource
Jan 06, 2021
CVSS 8.1
EPSS 0.11
CVE-2020-36187 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data via SharedPoolDataSource
Jan 06, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36186 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data
Jan 06, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36185 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data via SharedPoolDataSource
Jan 06, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-36184 HIGH
Netapp Cloud Backup < 21.1.2 - Insecure Deserialization
Jan 06, 2021
CVSS 8.1
EPSS 0.10
CVE-2020-36181 HIGH
Netapp Service Level Manager < 21.1.2 - Insecure Deserialization
Jan 06, 2021
CVSS 8.1
EPSS 0.05
CVE-2020-8287 MEDIUM
Node.js <10.23.1, 12.20.1, 14.15.4, 15.5.1 - SSRF
Jan 06, 2021
CVSS 6.5
EPSS 0.16
CVE-2020-8265 HIGH
Node.js <10.23.1, 12.20.1, 14.15.4, 15.5.1 - Use After Free
Jan 06, 2021
CVSS 8.1
EPSS 0.09
CVE-2020-27845 MEDIUM
openjpeg < 2.4.0 - Out-of-bounds Read in pi.c
Jan 05, 2021
CVSS 5.5
EPSS 0.01
CVE-2020-27844 HIGH
openjpeg < 2.4.0 - Out-of-Bounds Write via Crafted Input
Jan 05, 2021
CVSS 7.8
EPSS 0.01
CVE-2020-27843 MEDIUM
OpenJPEG < 2.4.0 - Out-of-bounds Read
Jan 05, 2021
CVSS 5.5
EPSS 0.02
CVE-2020-27842 MEDIUM
OpenJPEG < 2.4.0 - Denial of Service via Null Pointer Dereference in T2 Encoder
Jan 05, 2021
CVSS 5.5
EPSS 0.01
CVE-2020-27841 MEDIUM
openjpeg < 2.4.0 - Heap-based Buffer Overflow in pi.c
Jan 05, 2021
CVSS 5.5
EPSS 0.01
CVE-2020-35728 HIGH
jackson-databind 2.9.0-2.9.10.7 - Deserialization of Untrusted Data via JNDIConnectionPool
Dec 27, 2020
CVSS 8.1
EPSS 0.13
CVE-2020-14874 MEDIUM
Oracle Cloud Infrastructure Identity and Access Management - Privil...
Dec 22, 2020
CVSS 4.7
EPSS 0.01
CVE-2020-26422 LOW
Wireshark 3.4.0-3.4.1 - Denial of Service via QUIC Dissector Buffer Overflow
Dec 21, 2020
CVSS 3.7
EPSS 0.05
CVE-2020-28052 HIGH
Legion of the Bouncy Castle BC Java <1.67 - Info Disclosure
Dec 18, 2020
CVSS 8.1
EPSS 0.07
CVE-2020-35491 HIGH
jackson-databind 2.0.0-2.9.10.7 - Deserialization of Untrusted Data via SharedPoolDataSource
Dec 17, 2020
CVSS 8.1
EPSS 0.09
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV