VYPR
← Oracle Corporation

Vendor CVEs

Oracle Corporation

All CVEs

13,472 total · sorted by risk
  • CVE-2020-14711MedJul 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Easily exploitable vulnerability allows high privileged attacker with logon to the…

  • CVE-2020-14693MedJul 15, 2020
    Oracle Corporation
    Insurance Accounting Analyzer
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.9. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2020-14692MedJul 15, 2020
    Oracle Corporation
    Financial Services Loan Loss Forecasting And Provisioning
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (component: User Interface). Supported versions that are affected are 8.0.6-8.0.8. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-14685MedJul 15, 2020
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-14680MedJul 15, 2020
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2020-14655MedJul 15, 2020
    Oracle Corporation
    Security Service
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: SSL API). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS…

  • CVE-2020-14652MedJul 15, 2020
    Oracle Corporation
    Weblogic Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2020-14619MedJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.42cvss 6.5epss 0.03

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2020-14605MedJul 15, 2020
    Oracle Corporation
    Financial Services Analytical Applications Infrastructure
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows low privileged…

  • CVE-2020-14594MedJul 15, 2020
    Oracle Corporation
    Food And Beverage Applications
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Inventory Integration). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows high privileged attacker with logon to…

  • CVE-2020-14591MedJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2020-14576MedJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to…

  • CVE-2020-14539MedJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2020-8203HigJul 15, 2020
    Lodash
    Lodash
    risk 0.42cvss 7.4epss 0.05

    Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

  • CVE-2019-20907HigJul 13, 2020
    Python (programming language)
    Python
    risk 0.42cvss 7.5epss 0.03

    In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.

  • CVE-2020-15389MedJun 29, 2020
    Uclouvain
    Openjpeg
    risk 0.42cvss 6.5epss 0.03

    jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a double-free may also be possible. This is related to calling opj_image_destroy…

  • CVE-2020-12243HigApr 28, 2020
    OpenLDAP
    Openldap
    risk 0.42cvss 7.5epss 0.04

    In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).

  • CVE-2020-7067HigApr 27, 2020
    PHP
    PHP
    risk 0.42cvss 7.5epss 0.04

    In PHP versions 7.2.x below 7.2.30, 7.3.x below 7.3.17 and 7.4.x below 7.4.5, if PHP is compiled with EBCDIC support (uncommon), urldecode() function can be made to access locations past the allocated memory, due to erroneously using signed numbers as array indexes.

  • CVE-2020-2952MedApr 15, 2020
    Oracle Corporation
    HTTP Server
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP…

  • CVE-2020-2951MedApr 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2910MedApr 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2020-2906MedApr 15, 2020
    Oracle Corporation
    Peoplesoft Enterprise Scm Purchasing
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2020-2790MedApr 15, 2020
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.28 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…

  • CVE-2020-2780MedApr 15, 2020
    MySQL
    Server
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple…

  • CVE-2020-2737MedApr 15, 2020
    Oracle Corporation
    Database Server
    risk 0.42cvss 6.4epss 0.01

    Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with…

  • CVE-2020-2594MedApr 15, 2020
    Oracle Corporation
    Primavera P6 Enterprise Project Portfolio Management
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Project Manager). Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 -…

  • CVE-2020-7226HigJan 24, 2020
    Vt
    Cryptacular
    risk 0.42cvss 7.5epss 0.03

    CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of…

  • CVE-2020-7595HigJan 21, 2020
    Xmlsoft
    Libxml2
    risk 0.42cvss 7.5epss 0.08

    xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.

  • CVE-2019-20388HigJan 21, 2020
    Xmlsoft
    Libxml2
    risk 0.42cvss 7.5epss 0.03

    xmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.

  • CVE-2020-2725MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2721MedJan 15, 2020
    Oracle Corporation
    Flexcube Investor Servicing
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2716MedJan 15, 2020
    Oracle Corporation
    Banking Corporate Lending
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2020-2711MedJan 15, 2020
    Oracle Corporation
    Banking Payments
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2020-2705MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2704MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2703MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36 and prior to 6.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2020-2692MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2691MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2690MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2689MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2686MedJan 15, 2020
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2020-2684MedJan 15, 2020
    Oracle Corporation
    Flexcube Universal Banking
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2020-2681MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.5epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2678MedJan 15, 2020
    Oracle Corporation
    VM Virtualbox
    risk 0.42cvss 6.4epss 0.00

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the…

  • CVE-2020-2650MedJan 15, 2020
    Oracle Corporation
    Retail Customer Management And Segmentation Foundation
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Promotions). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2020-2627MedJan 15, 2020
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…

  • CVE-2020-2579MedJan 15, 2020
    NetApp
    Snapcenter
    risk 0.42cvss 6.5epss 0.02

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.46 and prior, 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2020-2576MedJan 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2020-2542MedJan 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

  • CVE-2020-2541MedJan 15, 2020
    Oracle Corporation
    Outside In Technology
    risk 0.42cvss 6.5epss 0.01

    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…

Page 98 of 270