oracle

10,484 tracked vulnerabilities.

CVE-2020-2517 LOW
Oracle Database Server 11.2.0.4-19c - DoS & Data Manipulation via ODBC Gateway
Jan 15, 2020
CVSS 3.3
EPSS 0.01
CVE-2020-2516 LOW
Oracle Database Server <19c - Privilege Escalation
Jan 15, 2020
CVSS 2.4
EPSS 0.01
CVE-2020-2515 MEDIUM
Oracle Database Server 11.2.0.4-19c - Authenticated DoS & Data Manipulation via ODBC Gateway
Jan 15, 2020
CVSS 5.0
EPSS 0.01
CVE-2020-2512 MEDIUM
Oracle Database Server <=19c - Unauthenticated DoS in Database Gateway for ODBC
Jan 15, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-2511 HIGH
Oracle Database Server 12.1.0.2, 12.2.0.1, 18c, 19c - Authenticated Denial of Service in Core RDBMS
Jan 15, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-2510 HIGH
Oracle Database Server <19c - Privilege Escalation
Jan 15, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-6851 HIGH
OpenJPEG < 2.3.1 - Heap-Based Buffer Overflow in opj_t1_clbl_decode_processor
Jan 13, 2020
CVSS 7.5
EPSS 0.05
CVE-2019-2483 HIGH
Oracle E-Business Suite - Info Disclosure
Dec 24, 2024
CVSS 8.2
EPSS 0.00
CVE-2019-9579 HIGH
Illumos <5.1.2 - Privilege Escalation
Dec 26, 2022
CVSS 8.1
EPSS 0.01
CVE-2019-17567 MEDIUM
Apache HTTP Server 2.4.6-2.4.46 - HTTP Request Smuggling via mod_proxy_wstunnel
Jun 10, 2021
CVSS 5.3
EPSS 0.60
CVE-2019-17566 HIGH
Apache Batik < 1.13 - Server-Side Request Forgery via xlink:href Attribute
Nov 12, 2020
CVSS 7.5
EPSS 0.11
CVE-2019-0233 HIGH
Apache Struts 2.0.0-2.5.20 - Denial of Service via File Upload Permission Override
Sep 14, 2020
CVSS 7.5
EPSS 0.69
CVE-2019-0230 CRITICAL NUCLEI
Apache Struts 2.0.0-2.5.20 - Remote Code Execution via Forced Double OGNL Evaluation
Sep 14, 2020
CVSS 9.8
EPSS 0.97
CVE-2019-20916 HIGH
pip < 19.2 - Directory Traversal via Content-Disposition Header
Sep 04, 2020
CVSS 7.5
EPSS 0.03
CVE-2019-20907 HIGH
Python < 3.5.10 - Denial of Service via Crafted TAR Archive
Jul 13, 2020
CVSS 7.5
EPSS 0.06
CVE-2019-20892 MEDIUM
net-snmp < 5.8.1.pre1 - Double Free via SNMPv3 GetBulk Request
Jun 25, 2020
CVSS 6.5
EPSS 0.02
CVE-2019-2880 HIGH
Oracle Retail Store Inventory Management <16.0 - RCE
Apr 15, 2020
CVSS 8.8
EPSS 0.02
CVE-2019-17561 HIGH
Apache NetBeans <= 11.2 - Improper Verification of Cryptographic Signature
Mar 30, 2020
CVSS 7.5
EPSS 0.02
CVE-2019-17560 CRITICAL
Apache NetBeans <= 11.2 - Improper Certificate Validation in Autoupdate System
Mar 30, 2020
CVSS 9.1
EPSS 0.02
CVE-2019-14893 CRITICAL
FasterXML jackson-databind < 2.9.10 - Remote Code Execution via Xalan JNDI Gadget Deserialization
Mar 02, 2020
CVSS 9.8
EPSS 0.04
CVE-2019-17569 MEDIUM
Apache Tomcat 7.0.98-7.0.99, 8.5.48-8.5.50, 9.0.28-9.0.30 - HTTP Request Smuggling via Invalid Transfer-Encoding Header
Feb 24, 2020
CVSS 4.8
EPSS 0.09
CVE-2019-15606 CRITICAL
Node.js 10.0.0-10.18.1, 13.0.0-13.7.0 - Authorization Bypass via HTTP Header Trailing Whitespace
Feb 07, 2020
CVSS 9.8
EPSS 0.20
CVE-2019-15605 CRITICAL
Node.js 10.0.0-10.18.9, 13.0.0-13.7.0 - HTTP Request Smuggling via Malformed Transfer-Encoding
Feb 07, 2020
CVSS 9.8
EPSS 0.57
CVE-2019-15604 HIGH
Node.js 10.0.0-10.18.9, 13.0.0-13.7.9 - Denial of Service via Crafted X.509 Certificate
Feb 07, 2020
CVSS 7.5
EPSS 0.20
CVE-2019-16792 HIGH
Waitress < 1.4.0 - HTTP Request Smuggling via Double Content-Length Header
Jan 22, 2020
CVSS 7.1
EPSS 0.02
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV