oracle

10,484 tracked vulnerabilities.

CVE-2020-26237 MEDIUM
highlight.js < 9.18.2 - Prototype Pollution via Malicious HTML Code Block
Nov 24, 2020
CVSS 5.8
EPSS 0.01
CVE-2020-28928 MEDIUM
musl libc < 1.2.1 - Out-of-bounds Write in wcsnrtombs
Nov 24, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-4788 MEDIUM
IBM VIOS 3.1 and AIX 7.1-7.2 - Information Disclosure via L1 Cache
Nov 20, 2020
CVSS 4.7
EPSS 0.00
CVE-2020-8277 HIGH
Node.js <15.2.1, <14.15.1, <12.19.1 - DoS
Nov 19, 2020
CVSS 7.5
EPSS 0.54
CVE-2020-7774 HIGH
y18n <3.2.2, 4.0.1, 5.0.5 - Prototype Pollution
Nov 17, 2020
CVSS 7.3
EPSS 0.69
CVE-2020-26217 HIGH NUCLEI
XStream < 1.4.14 - Remote Code Execution via Blocklist Bypass
Nov 16, 2020
CVSS 8.0
EPSS 0.85
CVE-2020-27193 MEDIUM
CKEditor 4.15.0 - Cross-Site Scripting via Color Dialog Plugin
Nov 12, 2020
CVSS 6.1
EPSS 0.02
CVE-2020-13954 MEDIUM
Apache CXF < 3.3.8 - Reflected Cross-Site Scripting via styleSheetPath
Nov 12, 2020
CVSS 6.1
EPSS 0.43
CVE-2020-28196 HIGH
MIT Kerberos <1.17.2, <1.18.x-1.18.3 - RCE
Nov 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-14750 CRITICAL KEVNUCLEI
Oracle WebLogic Server <14.1.1.0.0 - RCE
Nov 02, 2020
CVSS 9.8
EPSS 0.99
CVE-2020-7760 MEDIUM
CodeMirror < 5.58.2 - Uncontrolled Resource Consumption via Regular Expression
Oct 30, 2020
CVSS 5.3
EPSS 0.05
CVE-2020-27216 HIGH
Eclipse Jetty <9.4.32.v20200930, 10.0.0.alpha1-11.0.0.beta2 - Info ...
Oct 23, 2020
CVSS 7.0
EPSS 0.04
CVE-2020-27619 CRITICAL
Python 3.0.0-3.9.0 - Remote Code Execution via CJK Codec Test HTTP Content
Oct 22, 2020
CVSS 9.8
EPSS 0.08
CVE-2020-14901 MEDIUM
Oracle Database Server <19c - Privilege Escalation
Oct 21, 2020
CVSS 4.9
EPSS 0.01
CVE-2020-14900 MEDIUM
Oracle Database Server <20.2 - Info Disclosure
Oct 21, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-14899 MEDIUM
Oracle Database Server <20.2 - Info Disclosure
Oct 21, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-14898 MEDIUM
Oracle Database Server <20.2 - Privilege Escalation
Oct 21, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-14897 MEDIUM
Oracle FLEXCUBE <12.0.3 - Unauthorized Access
Oct 21, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-14896 MEDIUM
Oracle Banking Payments <14.4.0 - RCE
Oct 21, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-14895 MEDIUM
Oracle Utilities Framework - Unauth Update/Insert/Delete
Oct 21, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-14894 MEDIUM
Oracle Banking Corporate Lending <14.4.0 - Unauthorized Access
Oct 21, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-14893 MEDIUM
MySQL < 8.0.21 - Authenticated Denial of Service in Server Optimizer
Oct 21, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14892 MEDIUM
Oracle VM VirtualBox < 6.1.16 - Authenticated Denial of Service in Core
Oct 21, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-14891 MEDIUM
MySQL Server < 8.0.21 - Authenticated Denial of Service in Optimizer
Oct 21, 2020
CVSS 4.9
EPSS 0.02
CVE-2020-14890 MEDIUM
Oracle FLEXCUBE <12.0.3 - Unauthorized Access
Oct 21, 2020
CVSS 6.5
EPSS 0.02
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV