Archive
July 2020
Vulnerabilities first published in this month (UTC), newest first.
324 results · Clear filters · Feed
-
Medium 6.1
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…
-
Medium 4.2
Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported ve…
-
Medium 4.7
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…
-
Medium 6.1
Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: …
-
Medium 4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions t…
-
Medium 4.7
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Diagnostics). Sup…
-
Medium 6.8
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported v…
-
Medium 5.3
Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are J…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are…
-
Medium 4.8
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…
-
Medium 4.3
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acce…
-
Medium 5.3
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported vers…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte…
-
Medium 6.5
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…
-
Medium 5.5
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). The supported version tha…
-
Medium 4.3
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that …
-
Medium 5.9
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Serv…
-
Medium 4.2
Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The sup…
-
Medium 5.0
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version…
-
Medium 6.8
Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Suppo…
-
Medium 4.3
Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is…
-
Medium 4.3
Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Functio…
-
Medium 5.3
Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are …
-
Medium 5.9
Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). The supported versi…
-
Medium 5.9
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acce…
-
Medium 5.9
Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). Supported versions that…
-
Medium 5.4
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor…
-
Medium 6.1
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acce…
-
Medium 4.7
Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Sup…
-
Medium 6.5
Denial of Service in Synergy
In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name length set to 0xffffffff (4294967295) if the servers memory is less than 4 GB. It was verified that this issue does not cause a crash thro…
-
Medium 4.3
Web Gateway (MWG) - Inappropriate Encoding for output context
Inappropriate Encoding for output context vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows a remote attacker to cause MWG to return an ambiguous redirect response via getting a user to click on a malicious URL.
-
Medium 4.1CVE-2020-2978 Public exploit
Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that …
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 5.4
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affect…
-
Medium 5.4
A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a special…
-
Medium 4.6
TLS Validation Vulnerability in Envoy
In Envoy before versions 1.12.6, 1.13.4, 1.14.4, and 1.15.0 when validating TLS certificates, Envoy would incorrectly allow a wildcard DNS Subject Alternative Name apply to multiple subdomains. For example, with a SAN of *.example.com, Envoy would incorrectly…
-
Medium 6.4
Command Injection in iPear
In iPear, the manual execution of the eval() function can lead to command injection. Only PCs where commands are manually executed via "For Developers" are affected. This function allows executing any PHP code within iPear which may change, damage, or steal d…