oracle

10,484 tracked vulnerabilities.

CVE-2020-10969 HIGH
jackson-databind 2.7.0-2.7.9.6 - Deserialization of Untrusted Data via javax.swing.JEditorPane
Mar 26, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-10968 HIGH
FasterXML Jackson-Databind <2.9.10.4 - Code Injection
Mar 26, 2020
CVSS 8.8
EPSS 0.04
CVE-2020-1747 CRITICAL
PyYAML < 5.3.1 - Remote Code Execution via python/object/new Constructor
Mar 24, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-1951 MEDIUM
Apache Tika 1.0-1.23 - Denial of Service via Crafted PSD File
Mar 23, 2020
CVSS 5.5
EPSS 0.03
CVE-2020-1950 MEDIUM
Apache Tika 1.0-1.23 - Uncontrolled Resource Consumption in PSDParser
Mar 23, 2020
CVSS 5.5
EPSS 0.03
CVE-2020-10673 HIGH
FasterXML jackson-databind <2.9.10.4 - Code Injection
Mar 18, 2020
CVSS 8.8
EPSS 0.08
CVE-2020-10672 HIGH
FasterXML jackson-databind <2.9.10.4 - Code Injection
Mar 18, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-1953 CRITICAL
Apache Commons Configuration <2.7 - Code Injection
Mar 13, 2020
CVSS 10.0
EPSS 0.07
CVE-2020-10531 HIGH
International Components for Unicode < 66.1 - Heap-Based Buffer Overflow via UnicodeString::doAppend() Integer Overflow
Mar 12, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-10108 CRITICAL
Twisted Web < 19.10.0 - HTTP Request Smuggling via Dual Content-Length Headers
Mar 12, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-5258 HIGH
dojo < 1.11.10 - Prototype Pollution via deepCopy Method
Mar 10, 2020
CVSS 7.7
EPSS 0.04
CVE-2020-9281 MEDIUM
CKEditor 4.0-4.13 - Cross-Site Scripting via Protected Comment Injection
Mar 07, 2020
CVSS 6.1
EPSS 0.04
CVE-2020-10188 CRITICAL
Juniper Junos - Remote Code Execution via Buffer Overflow in telnetd utility.c
Mar 06, 2020
CVSS 9.8
EPSS 0.75
CVE-2020-9548 CRITICAL NUCLEI
jackson-databind 2.0.0-2.7.9.7 - Deserialization of Untrusted Data via anteros-core Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.18
CVE-2020-9547 CRITICAL NUCLEI
jackson-databind 2.0.0-2.7.9.7 - Deserialization of Untrusted Data via com.ibatis.sqlmap Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.19
CVE-2020-9546 CRITICAL
jackson-databind 2.7.0-2.7.9.6 - Deserialization of Untrusted Data via HikariConfig Gadget
Mar 02, 2020
CVSS 9.8
EPSS 0.05
CVE-2020-1938 CRITICAL KEVNUCLEI
Apache Tomcat 7.0.0-7.0.99, 8.5.0-8.5.50, 9.0.0.M1-9.0.0.30 - Remote Code Execution via AJP File Read and JSP Processing
Feb 24, 2020
CVSS 9.8
EPSS 0.99
CVE-2020-1935 MEDIUM
Apache Tomcat 7.0.0-7.0.99, 8.5.0-8.5.50, 9.0.0.M1-9.0.30 - HTTP Request Smuggling via Invalid Transfer-Encoding Header
Feb 24, 2020
CVSS 4.8
EPSS 0.09
CVE-2020-5245 HIGH
Dropwizard-Validation < 1.3.19 - Remote Code Execution via Java Expression Language Injection
Feb 24, 2020
CVSS 7.9
EPSS 0.03
CVE-2020-9327 HIGH
Sqlite < 1.0.1.1 - NULL Pointer Dereference
Feb 21, 2020
CVSS 7.5
EPSS 0.04
CVE-2020-8840 CRITICAL
FasterXML Jackson-Databind <2.9.10.2 - RCE
Feb 10, 2020
CVSS 9.8
EPSS 0.27
CVE-2020-7060 MEDIUM
PHP 7.2.0-7.2.26 - Out-of-bounds Read in mbstring Multibyte Conversion
Feb 10, 2020
CVSS 6.5
EPSS 0.09
CVE-2020-7059 MEDIUM
PHP 7.2.0-7.2.26 - Out-of-bounds Read in fgetss() Function
Feb 10, 2020
CVSS 6.5
EPSS 0.07
CVE-2020-7226 HIGH
Cryptacular < 1.1.4 - Denial of Service via Excessive Memory Allocation in CiphertextHeader
Jan 24, 2020
CVSS 7.5
EPSS 0.03
CVE-2020-7595 HIGH
libxml2 2.9.10 - Denial of Service via Infinite Loop in xmlStringLenDecodeEntities
Jan 21, 2020
CVSS 7.5
EPSS 0.08
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV