15 January 2020

54 results · Clear filters · Feed

• High 7.5
  CVE-2019-15961

  Clam AntiVirus (ClamAV) Software Email Parsing Vulnerability

  A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to ineffici…

  clamav clamav clamav clamav Debian Ubuntu Alpine
  Jan 15, 2020
• High 7.5
  CVE-2020-1929

  Improper Certificate Validation in Apache Beam

  The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certificate verification disables trust verification in every case. This exclusion also gets re…

  Apache Beam org.apache.beam:beam-sdks-java-io-mongodb Maven
  Jan 15, 2020
• High 7.5
  CVE-2015-1811

  XML external entity (XXE) vulnerability in Jenkins

  XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.

  CloudBees Jenkins LTS Jenkins org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Jan 15, 2020
• High 7.5
  CVE-2015-1809

  XML external entity (XXE) vulnerability in Jenkins

  XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.

  CloudBees Jenkins Jenkins LTS org.jenkins-ci.main:jenkins-core Web / CMS Maven
  Jan 15, 2020
• High 8.8
  CVE-2015-6497

  Magento arbitrary PHP code execution via the productData parameter

  The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute ar…

  magento/core Packagist
  Jan 15, 2020
• High 7.5
  CVE-2020-2726

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 7.5
  CVE-2020-2728

  Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). …

  Oracle Identity Manager
  Jan 15, 2020
• High 7.1
  CVE-2020-2713

  Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…

  Oracle Banking Payments
  Jan 15, 2020
• High 7.1
  CVE-2020-2718

  Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…

  Oracle Banking Corporate Lending
  Jan 15, 2020
• High 7.1
  CVE-2020-2723

  Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…

  Oracle FLEXCUBE Investor Servicing
  Jan 15, 2020
• High 7.1
  CVE-2020-2688

  Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servi…

  Oracle Financial Services Analytical Applications Infrastructure
  Jan 15, 2020
• High 7.5
  CVE-2020-2702

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 7.5
  CVE-2020-2701

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 8.8
  CVE-2020-2696

  Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported ve…

  Oracle Solaris Operating System
  Jan 15, 2020
• High 7.1
  CVE-2020-2699

  Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: In…

  Oracle FLEXCUBE Universal Banking
  Jan 15, 2020
• High 7.5
  CVE-2020-2698

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 8.2
  CVE-2020-2671

  Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported ver…

  Oracle Email Center
  Jan 15, 2020
• High 8.2
  CVE-2020-2674

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 8.2
  CVE-2020-2682

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jan 15, 2020
• High 7.1
  CVE-2020-2675

  Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login). The supp…

  Oracle Hospitality OPERA 5 Property Services
  Jan 15, 2020
• High 8.2
  CVE-2020-2665

  Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that ar…

  Oracle iSupport
  Jan 15, 2020
• High 8.2
  CVE-2020-2672

  Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported ver…

  Oracle Email Center
  Jan 15, 2020
• High 8.2
  CVE-2020-2670

  Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported ver…

  Oracle Email Center
  Jan 15, 2020
• High 7.5
  CVE-2020-2673

  Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Buil…

  Oracle Application Testing Suite
  Jan 15, 2020
• High 8.2
  CVE-2020-2669

  Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported ver…

  Oracle Email Center
  Jan 15, 2020
• High 8.2
  CVE-2020-2662

  Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that ar…

  Oracle iSupport
  Jan 15, 2020
• High 8.2
  CVE-2020-2651

  Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…

  Oracle CRM Technical Foundation
  Jan 15, 2020
• High 8.2
  CVE-2020-2652

  Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…

  Oracle CRM Technical Foundation
  Jan 15, 2020
• High 8.2
  CVE-2020-2653

  Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo…

  Oracle CRM Technical Foundation
  Jan 15, 2020
• High 8.2
  CVE-2020-2661

  Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that ar…

  Oracle iSupport
  Jan 15, 2020
• High 8.2
  CVE-2020-2658

  Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others). Supported versions that ar…

  Oracle iSupport
  Jan 15, 2020
• High 7.1
  CVE-2020-2605

  Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is af…

  Oracle Solaris Operating System
  Jan 15, 2020
• High 8.1
  CVE-2020-2604

  Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

  Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi
  Jan 15, 2020
• High 8.2
  CVE-2020-2591

  Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Applicat…

  Oracle Web Applications Desktop Integrator
  Jan 15, 2020
• High 8.2
  CVE-2020-2582

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions th…

  Oracle iStore
  Jan 15, 2020
• High 7.5
  CVE-2020-2565

  Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). The supported …

  Oracle Solaris Operating System
  Jan 15, 2020
• High 7.2
  CVE-2020-2549

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). The s…

  Oracle WebLogic Server
  Jan 15, 2020
• High 7.3
  CVE-2020-2543

  Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). …

  Oracle Outside In Technology
  Jan 15, 2020
• High 7.3
  CVE-2020-2556

  Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineerin…

  Oracle Primavera P6 Professional Project Management
  Jan 15, 2020
• High 7.1
  CVE-2020-2537

  Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: An…

  Oracle Oracle Business Intelligence Enterprise Edition
  Jan 15, 2020