oracle

10,484 tracked vulnerabilities.

CVE-2019-20388 HIGH
libxml2 2.9.10 - Use-After-Free in xmlSchemaPreRun
Jan 21, 2020
CVSS 7.5
EPSS 0.04
CVE-2019-17573 MEDIUM
Apache CXF 3.2.0-3.2.11 - Reflected Cross-Site Scripting via Services Listing Page
Jan 16, 2020
CVSS 6.1
EPSS 0.07
CVE-2019-12423 HIGH
Apache CXF < 3.2.12 - Insufficiently Protected Credentials via JWK Keystore Configuration
Jan 16, 2020
CVSS 7.5
EPSS 0.06
CVE-2019-12399 HIGH
Apache Kafka <2.3.0 - Info Disclosure
Jan 14, 2020
CVSS 7.5
EPSS 0.04
CVE-2019-0219 CRITICAL
Cordova InAppBrowser < 3.0.0 - Arbitrary JavaScript Execution via gap-iab URI
Jan 14, 2020
CVSS 9.8
EPSS 0.08
CVE-2019-5064 HIGH
OpenCV < 4.2.0 - Heap Buffer Overflow via Crafted JSON File
Jan 03, 2020
CVSS 8.8
EPSS 0.11
CVE-2019-5063 HIGH
OpenCV 4.1.0 - Heap Buffer Overflow via Crafted XML File
Jan 03, 2020
CVSS 8.8
EPSS 0.21
CVE-2019-20330 CRITICAL
Netapp Snapcenter < 2.7.9.7 - Insecure Deserialization
Jan 03, 2020
CVSS 9.8
EPSS 0.09
CVE-2019-14862 MEDIUM
knockout < 3.5.0-beta - Cross-Site Scripting
Jan 02, 2020
CVSS 6.1
EPSS 0.02
CVE-2019-20218 HIGH
SQLite 3.30.1 - Denial of Service via SELECT Expander Parsing Error
Jan 02, 2020
CVSS 7.5
EPSS 0.04
CVE-2019-17558 HIGH KEVNUCLEI
Apache Solr 5.0.0-8.3.1 - Remote Code Execution via Velocity Template Injection
Dec 30, 2019
CVSS 7.5
EPSS 0.99
CVE-2019-16789 HIGH
Waitress <1.4.0 - HTTP Request Smuggling
Dec 26, 2019
CVSS 7.1
EPSS 0.03
CVE-2019-19925 HIGH
SQLite 3.30.1 - Unrestricted Upload of File with Dangerous Type via zipfileUpdate
Dec 24, 2019
CVSS 7.5
EPSS 0.07
CVE-2019-19956 HIGH
libxml2 < 2.9.10 - Memory Leak in xmlParseBalancedChunkMemoryRecover
Dec 24, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-19924 MEDIUM
SQLite 3.30.1 - Denial of Service via Incorrect Parser-Tree Rewriting
Dec 24, 2019
CVSS 5.3
EPSS 0.08
CVE-2019-19923 HIGH
SQLite 3.30.1 - NULL Pointer Dereference in flattenSubquery
Dec 24, 2019
CVSS 7.5
EPSS 0.07
CVE-2019-5108 MEDIUM
Linux Kernel < 5.3 - Denial of Service via IAPP Location Update Spoofing
Dec 23, 2019
CVSS 6.5
EPSS 0.10
CVE-2019-12418 HIGH
Apache Tomcat <9.0.29, 8.5.48, 7.0.98 - RCE
Dec 23, 2019
CVSS 7.0
EPSS 0.01
CVE-2019-17563 HIGH
Apache Tomcat <9.0.29, 8.5.49, 7.0.98 - Session Fixation
Dec 23, 2019
CVSS 7.5
EPSS 0.11
CVE-2019-19926 HIGH
SQLite 3.30.1 - NULL Pointer Dereference in select.c multiSelect
Dec 23, 2019
CVSS 7.5
EPSS 0.07
CVE-2019-19922 MEDIUM
Linux Kernel < 5.3.9 - Denial of Service via Slice Expiration in CFS Quota
Dec 22, 2019
CVSS 5.5
EPSS 0.01
CVE-2019-16786 HIGH
Waitress < 1.4.0 - HTTP Request Smuggling via Transfer-Encoding Header Mishandling
Dec 20, 2019
CVSS 7.1
EPSS 0.03
CVE-2019-16785 HIGH
Waitress < 1.4.0 - HTTP Request Smuggling via Inconsistent CRLF Parsing
Dec 20, 2019
CVSS 7.1
EPSS 0.03
CVE-2019-17571 CRITICAL
Apache Log4j <= 1.2.17 - Deserialization of Untrusted Data via SocketServer
Dec 20, 2019
CVSS 9.8
EPSS 0.66
CVE-2019-19880 HIGH
SQLite 3.30.1 - NULL Pointer Dereference in Window Function ORDER BY Clause
Dec 18, 2019
CVSS 7.5
EPSS 0.07
Products
mysql 1,329 jre 799 jdk 787 solaris 555 database_server 516 vm_virtualbox 427 peoplesoft_enterprise_peopletools 355 e-business_suite 337 weblogic_server 322 fusion_middleware 313 mysql_server 278 linux 229 application_server 198 outside_in_technology 195 graalvm 188 jd_edwards_enterpriseone_tools 164 peoplesoft_products 158 enterprise_manager_base_platform 135 communications_cloud_native_core_policy 125 retail_xstore_point_of_service 125 zfs_storage_appliance_kit 117 enterprise_manager_ops_center 107 jrockit 107 http_server 105 webcenter_portal 100 openjdk 98 supply_chain_products_suite 97 flexcube_universal_banking 95 primavera_unifier 95 financial_services_analytical_applications_infrastructure 90
Quick Filters
Critical CVEs With Exploits In CISA KEV