oracle

10,484 tracked vulnerabilities.

CVE-2020-14530 MEDIUM
Oracle Fusion Middleware 11.1.1.9.0 - Info Disclosure
Jul 15, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-14529 MEDIUM
Oracle Construction & Engineering - Investor Module <19.0.0.0 - Inf...
Jul 15, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-14528 MEDIUM
Oracle Construction and Engineering Web Access <19.0.0.0 - Info Dis...
Jul 15, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-14527 MEDIUM
Oracle Construction and Engineering Web Access <19.0.0.0 - Unauth RCE
Jul 15, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-8203 HIGH
lodash < 4.17.20 - Prototype Pollution via _.zipObjectDeep
Jul 15, 2020
CVSS 7.4
EPSS 0.05
CVE-2020-13935 HIGH NUCLEI
Apache Tomcat 7.0.27-7.0.104, 8.5.0-8.5.56, 9.0.0.M1-9.0.36, 10.0.0-M1-M6 DoS via WebSocket Frame Payload Length
Jul 14, 2020
CVSS 7.5
EPSS 0.88
CVE-2020-13934 HIGH
Apache Tomcat 8.5.1-8.5.56, 9.0.0.M5-9.0.36, 10.0.0-M1-10.0.0-M6 - Denial of Service via h2c Direct Connection
Jul 14, 2020
CVSS 7.5
EPSS 0.64
CVE-2020-15719 MEDIUM
OpenLDAP < 2.4.46-10.el8 - Improper Certificate Validation
Jul 14, 2020
CVSS 4.2
EPSS 0.02
CVE-2020-11994 HIGH
Apache Camel 2.22.0-2.22.5 - Server-Side Template Injection and Arbitrary File Disclosure
Jul 08, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-15389 MEDIUM
OpenJPEG < 2.3.1 - Use-After-Free in opj_decompress.c
Jun 29, 2020
CVSS 6.5
EPSS 0.03
CVE-2020-15358 MEDIUM
SQLite < 3.32.3 - Out-of-bounds Write via Query-Flattener Optimization
Jun 27, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-11996 HIGH
Apache Tomcat <10.0.0-M6, <9.0.36, <8.5.56 - DoS
Jun 26, 2020
CVSS 7.5
EPSS 0.27
CVE-2020-15025 MEDIUM
ntp 4.2.8-4.2.8p14 and 4.3.x < 4.3.101 - Denial of Service via CMAC Key Memory Leak
Jun 24, 2020
CVSS 4.4
EPSS 0.03
CVE-2020-9480 CRITICAL NUCLEI
Apache Spark <= 2.4.5 - Unauthenticated Remote Code Execution via Standalone Resource Manager
Jun 23, 2020
CVSS 9.8
EPSS 0.27
CVE-2020-14422 MEDIUM
Python < 3.5.10 - Denial of Service via IPv4Interface and IPv6Interface Hash Calculation
Jun 18, 2020
CVSS 5.9
EPSS 0.12
CVE-2020-14195 HIGH
jackson-databind 2.9.0-2.9.10.4 - Deserialization of Untrusted Data via org.jsecurity.realm.jndi.JndiRealmFactory
Jun 16, 2020
CVSS 8.1
EPSS 0.05
CVE-2020-14147 HIGH
Redis < 6.0.3 - Denial of Service via Integer Overflow in getnum Function
Jun 15, 2020
CVSS 7.7
EPSS 0.03
CVE-2020-14155 MEDIUM
PCRE < 8.44 - Integer Overflow via Large Number After (?C Substring
Jun 15, 2020
CVSS 5.3
EPSS 0.04
CVE-2020-14060 HIGH
jackson-databind 2.9.0-2.9.10.4 - Deserialization of Untrusted Data via apache/drill JNDIConnectionPool
Jun 14, 2020
CVSS 8.1
EPSS 0.09
CVE-2020-14062 HIGH
FasterXML jackson-databind 2.9.0-2.9.10.4 - Deserialization of Untrusted Data via xalan2 JNDIConnectionPool
Jun 14, 2020
CVSS 8.1
EPSS 0.08
CVE-2020-14061 HIGH
jackson-databind 2.9.0-2.9.10.4 - Deserialization of Untrusted Data via Oracle AQjms Gadgets
Jun 14, 2020
CVSS 8.1
EPSS 0.04
CVE-2020-8172 HIGH
Node <12.18.0-14.4.0 - SSL/TLS Verification Bypass
Jun 08, 2020
CVSS 7.4
EPSS 0.06
CVE-2020-13871 HIGH
SQLite 3.32.2 - Use-After-Free in Window Function Parse Tree Rewrite
Jun 06, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-12723 HIGH
Perl < 5.30.3 - Buffer Overflow via Recursive S_study_chunk Calls
Jun 05, 2020
CVSS 7.5
EPSS 0.06
CVE-2020-10878 HIGH
Perl < 5.30.3 - Integer Overflow via Regular Expression Compilation
Jun 05, 2020
CVSS 8.6
EPSS 0.05
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV