oracle

10,484 tracked vulnerabilities.

CVE-2020-10543 HIGH
Perl < 5.30.3 - Heap-Based Buffer Overflow via Nested Regular Expression Quantifiers
Jun 05, 2020
CVSS 8.2
EPSS 0.11
CVE-2020-11080 LOW
nghttp2 < 1.41.0 - Denial of Service via Large HTTP/2 SETTINGS Frame Payload
Jun 03, 2020
CVSS 3.7
EPSS 0.05
CVE-2020-3235 HIGH
Cisco IOS - Authenticated Denial of Service via SNMP Input Validation
Jun 03, 2020
CVSS 7.7
EPSS 0.02
CVE-2020-13596 MEDIUM
Django 2.2-2.2.13 - Cross-Site Scripting via ForeignKeyRawIdWidget Query Parameters
Jun 03, 2020
CVSS 6.1
EPSS 0.03
CVE-2020-13254 MEDIUM
Django <2.2.13, <3.0.7 - Info Disclosure
Jun 03, 2020
CVSS 5.9
EPSS 0.06
CVE-2020-13632 MEDIUM
SQLite < 3.32.0 - NULL Pointer Dereference via Matchinfo Query
May 27, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-13631 MEDIUM
SQLite < 3.32.0 - Virtual Table Renaming to Shadow Table
May 27, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-13630 HIGH
SQLite < 3.32.0 - Use-After-Free in FTS3 Snippet Feature
May 27, 2020
CVSS 7.0
EPSS 0.01
CVE-2020-13434 MEDIUM
SQLite < 3.32.0 - Integer Overflow in sqlite3_str_vappendf
May 24, 2020
CVSS 5.5
EPSS 0.01
CVE-2020-9484 HIGH NUCLEI
Apache Tomcat < 7.0.108 - Insecure Deserialization
May 20, 2020
CVSS 7.0
EPSS 0.57
CVE-2020-10726 MEDIUM
DPDK < 19.11 - Denial of Service via VHOST_USER_GET_INFLIGHT_FD Message Flood
May 20, 2020
CVSS 6.0
EPSS 0.00
CVE-2020-10725 HIGH
DPDK < 19.11 - Denial of Service via Missing Descriptor Address Validation
May 20, 2020
CVSS 7.7
EPSS 0.02
CVE-2020-9410 HIGH
TIBCO JasperReports Library and Server < 7.1.1 - Stored Cross-Site Scripting via Fusion Charts Data Source
May 20, 2020
CVSS 7.3
EPSS 0.05
CVE-2020-9409 CRITICAL
TIBCO JasperReports Server < 7.1.1 - Unauthenticated Privilege Escalation to Superuser
May 20, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7656 MEDIUM
jQuery < 1.9.0 - Cross-Site Scripting via Load Method
May 19, 2020
CVSS 6.1
EPSS 0.06
CVE-2020-10723 MEDIUM
DPDK < 17.05 - Memory Corruption via Integer Truncation
May 19, 2020
CVSS 5.1
EPSS 0.00
CVE-2020-10722 MEDIUM
DPDK >= 18.05 - Memory Corruption via Integer Overflow in vhost_user_set_log_base
May 19, 2020
CVSS 5.1
EPSS 0.00
CVE-2020-1941 MEDIUM
Oracle Flexcube Private Banking - Cross-Site Scripting
May 14, 2020
CVSS 6.1
EPSS 0.06
CVE-2020-11973 CRITICAL
Apache Camel 2.22.0-2.25.0 and 3.0.0-3.1.0 - Deserialization of Untrusted Data via Netty
May 14, 2020
CVSS 9.8
EPSS 0.07
CVE-2020-11972 CRITICAL
Apache Camel 2.22.0-2.25.0 and 3.0.0-3.1.0 - Deserialization of Untrusted Data via RabbitMQ Java Deserialization
May 14, 2020
CVSS 9.8
EPSS 0.06
CVE-2020-11971 HIGH
Apache Camel 2.22.0-3.1.0 - Rebind Flaw in JMX
May 14, 2020
CVSS 7.5
EPSS 0.14
CVE-2020-1945 MEDIUM
Apache Ant 1.1-1.9.14 and 1.10.0-1.10.7 - Information Disclosure and Arbitrary File Write via Temporary Directory
May 14, 2020
CVSS 6.3
EPSS 0.02
CVE-2020-9315 HIGH NUCLEI
Oracle iPlanet Web Server 7.0-7.0.26 - Unauthenticated Sensitive Information Exposure via Administration Console
May 10, 2020
CVSS 7.5
EPSS 0.82
CVE-2020-9314 MEDIUM NUCLEI
Oracle iPlanet Web Server 7.0-7.0.26 - Cross-Site Scripting via Administration Console admingui productNameSrc Parameter
May 10, 2020
CVSS 4.8
EPSS 0.01
CVE-2020-12771 MEDIUM
Linux kernel <5.6.11 - Info Disclosure
May 09, 2020
CVSS 5.5
EPSS 0.01
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV