15 July 2020

125 results · Clear filters · Feed

• Medium 5.3
  CVE-2020-15107

  x87 FPU operations in enclaves are vulnerable to ABI poisoning in openenclave

  In openenclave before 0.10.0, enclaves that use x87 FPU operations are vulnerable to tampering by a malicious host application. By violating the Linux System V Application Binary Interface (ABI) for such operations, a host app can compromise the execution int…

  openenclave openenclave
  Jul 15, 2020
• Medium 5.4
  CVE-2020-9311

  Silverstripe CMS XSS Vulnerability

  In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted login form URLs.

  silverstripe/framework silverstripe/cms Packagist
  Jul 15, 2020
• Medium 5.3
  CVE-2020-6165

  Silverstripe has Incorrect Default Permissions

  SilverStripe 4.5.0 allows attackers to read certain records that should not have been placed into a result set. This affects silverstripe/recipe-cms. The automatic permission-checking mechanism in the silverstripe/graphql module does not provide complete prot…

  silverstripe/graphql silverstripe/recipe-cms Packagist
  Jul 15, 2020
• Medium 4.4
  CVE-2020-13788

  Harbor is vulnerable to a limited Server-Side Request Forgery (SSRF) (CVE-2020-13788)

  Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.

  github.com/goharbor/harbor Go
  Jul 15, 2020
• Medium 5.6
  CVE-2020-15366

  Prototype Pollution in Ajv

  An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2. A carefully crafted JSON schema could be provided that allows execution of other code by prototype pollution. (While untrusted schemas are recommended against, the wo…

  node-ajv node-ajv ajv Debian Ubuntu npm
  Jul 15, 2020
• Medium 5.9
  CVE-2019-19326

  SilverStripe Web Cache Poisoning through HTTPRequestBuilder

  Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTTP layer can be vulnerable to web cache poisoning. Through modifying the X-Original-Url and X-HTTP-Method-Override headers, responses with m…

  silverstripe/framework Packagist
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2971

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2974

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2966

  Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

  Oracle WebLogic Server
  Jul 15, 2020
• Medium 6.1
  CVE-2020-2562

  Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor…

  Oracle Primavera Portfolio Management
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2513

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2976

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 4.6
  CVE-2020-2977

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2972

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2973

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 5.4
  CVE-2020-2975

  Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affect…

  Oracle Application Express
  Jul 15, 2020
• Medium 6.6
  CVE-2020-2969 Public exploit

  Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, …

  Oracle Oracle Database
  Jul 15, 2020
• Medium 4.7
  CVE-2020-14716

  Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Fram…

  Oracle Common Applications
  Jul 15, 2020
• Medium 4.7
  CVE-2020-14717

  Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Fram…

  Oracle Common Applications
  Jul 15, 2020
• Medium 6.5
  CVE-2020-14711

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 4.4
  CVE-2020-14715

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 6.3
  CVE-2020-14721

  Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: …

  Oracle Enterprise Communications Broker
  Jul 15, 2020
• Medium 5.0
  CVE-2020-14712

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 5.8
  CVE-2020-14722

  Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: …

  Oracle Enterprise Communications Broker
  Jul 15, 2020
• Medium 4.4
  CVE-2020-14714

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 5.9
  CVE-2020-14706

  Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineerin…

  Oracle Primavera P6 Enterprise Project Portfolio Management
  Jul 15, 2020
• Medium 5.4
  CVE-2020-14710

  Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: …

  Oracle Retail Customer Management and Segmentation Foundation
  Jul 15, 2020
• Medium 4.3
  CVE-2020-14708

  Vulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: …

  Oracle Retail Customer Management and Segmentation Foundation
  Jul 15, 2020
• Medium 5.0
  CVE-2020-14707

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 6.0
  CVE-2020-14703

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 6.5
  CVE-2020-14693

  Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component:…

  Oracle Insurance Accounting Analyzer
  Jul 15, 2020
• Medium 6.5
  CVE-2020-14692

  Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Servi…

  Oracle Financial Services Loan Loss Forecasting and Provisioning
  Jul 15, 2020
• Medium 4.9
  CVE-2020-14702

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2020
• Medium 5.3
  CVE-2020-14694

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 6.0
  CVE-2020-14704

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 5.3
  CVE-2020-14695

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 5.3
  CVE-2020-14700

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 5.3
  CVE-2020-14698

  Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…

  Oracle VM VirtualBox virtualbox Virtualization Ubuntu
  Jul 15, 2020
• Medium 6.5
  CVE-2020-14680

  Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

  Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu
  Jul 15, 2020
• Medium 4.3
  CVE-2020-14684

  Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Servi…

  Oracle Financial Services Analytical Applications Infrastructure
  Jul 15, 2020