Archive
January 2020
Vulnerabilities first published in this month (UTC), newest first.
1,661 results · Feed
-
Unscored —
Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and e…
-
High 7.5
XML external entity (XXE) vulnerability in Jenkins
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document.
-
High 7.5
XML external entity (XXE) vulnerability in Jenkins
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
-
Unscored —
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended rest…
-
Unscored —
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists …
-
Unscored —
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote aut…
-
Unscored —
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remot…
-
Medium 5.3
Microsoft Windows RDP can bypass the Windows lock screen
A vulnerability in Microsoft Windows 10 1803 and Windows Server 2019 and later systems can allow authenticated RDP-connected clients to gain access to user sessions without needing to interact with the Windows lock screen. Should a network anomaly trigger a t…
-
Medium 6.5
MyCar Controls uses hard-coded credentials
The MyCar Controls of AutoMobility Distribution Inc., mobile application contains hard-coded admin credentials. A remote unauthenticated attacker may be able to send commands to and retrieve data from a target MyCar unit. This may allow the attacker to learn …
-
Medium 5.3
Centire Yopify leaks customer information
Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization.
-
High 8.8
Magento arbitrary PHP code execution via the productData parameter
The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute ar…
-
Unscored —
The Linux kernel before 2.4.36-rc1 has a race condition. It was possible to bypass systrace policies by flooding the pt…
-
Medium 5.4
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported vers…
-
Low 3.9
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2,…
-
Medium 5.4
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Appl…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 6.0
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). …
-
Medium 5.4
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
Medium 6.5
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…
-
Medium 5.4
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 5.4
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 5.4
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
Medium 5.4
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…
-
High 7.1
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…
-
Medium 4.3
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
Medium 4.7
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version tha…
-
Medium 6.5
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
High 7.1
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
Medium 6.5
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
Medium 4.3
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Suppo…
-
High 7.1
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
Medium 4.3
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
Medium 5.4
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: I…
-
Medium 5.4
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineerin…
-
High 7.1
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servi…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…