Skip to content
OpenAdvisories

Archive

21 October 2020

Vulnerabilities first published on this day (UTC), newest first.

← September 2020 2020 / October /21 November 2020 →
  1. 147
  2. 273
  3. 3 
  4. 41
  5. 523
  6. 672
  7. 728
  8. 855
  9. 941
  10. 106
  11. 11 
  12. 1260
  13. 1323
  14. 1452
  15. 1552
  16. 16201
  17. 171
  18. 181
  19. 1998
  20. 2049
  21. 21245
  22. 2299
  23. 2328
  24. 24 
  25. 251
  26. 2626
  27. 27173
  28. 2859
  29. 2954
  30. 3026
  31. 3114
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.6
    CVE-2020-7750 Public exploit

    Cross-site Scripting (XSS)

    This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM via the _transformMeasurements function.

    scratch-svg-renderer npm
  • Critical 9.8
    CVE-2020-14882 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…

    Oracle WebLogic Server
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-14859

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2020-14875

    Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…

    Oracle Marketing
  • Critical 10.0
    CVE-2020-14871 Exploited Public exploit EPSS 80%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported v…

    Oracle Solaris Operating System
    KEV Nov 3, 2021
  • Critical 9.1
    CVE-2020-14876

    Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: User Interface). Supported …

    Oracle Trade Management mysql-5.5 Ubuntu
  • Critical 9.8
    CVE-2020-14855

    Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administr…

    Oracle Universal Work Queue
  • Critical 9.8
    CVE-2020-14841 EPSS 50%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.8
    CVE-2020-14825 EPSS 30%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions t…

    Oracle WebLogic Server
  • Critical 9.1
    CVE-2020-14805

    Vulnerability in the Oracle E-Business Suite Secure Enterprise Search product of Oracle E-Business Suite (component: Se…

    Oracle E-Business Suite Secure Enterprise Search