CVEs published in July 2020
2,061 vulnerabilities, 222 critical, 16 exploited.
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.4 High
- oracle commerce service center, oracle corporation commerce platform +1 moreVulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component:...7.4 High
- oracle applications framework, oracle corporation project planning and control +1 moreVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...8.2 High
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...3.5 Low
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...4.7 Medium
- oracle siebel ui frameworkVulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server)....5.9 Medium
- oracle security serviceVulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None...5.9 Medium
- oracle primavera portfolio managementVulnerability in the Primavera Portfolio Management product of Oracle Construction and...5.4 Medium
- oracle primavera portfolio managementVulnerability in the Primavera Portfolio Management product of Oracle Construction and...6.1 Medium
- oracle primavera portfolio managementVulnerability in the Primavera Portfolio Management product of Oracle Construction and...5.9 Medium
- symless synergy, fedoraproject fedora, symless synergy-core +2 moreDenial of Service in Synergy6.5 Medium
- jenkins gitlab authentication, jenkins project gitlab authentication plugin +1 moreImproper authorization of users and groups with the same base name in Jenkins GitLab Authentication Plugin8.8 High
- jenkins deployer framework, jenkins project deployer framework plugin +1 moreStored XSS vulnerability in Jenkins Deployer Framework Plugin5.4 Medium
- jenkins matrix authorization strategy, jenkins project matrix authorization strategy plugin +1 moreStored XSS vulnerability in Jenkins Matrix Authorization Strategy Plugin5.4 Medium
- jenkins matrix project, jenkins project matrix project plugin +1 moreStored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project Plugin5.4 Medium
- jenkins matrix project, jenkins project matrix project plugin +1 moreStored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project Plugin5.4 Medium
- jenkinsStored XSS vulnerability in Jenkins console links5.4 Medium
- jenkinsStored XSS vulnerability in Jenkins 'keep forever' badge icon5.4 Medium
- jenkinsStored XSS vulnerability in Jenkins upstream cause5.4 Medium
- jenkinsStored XSS vulnerability in Jenkins job build time trend5.4 Medium
- jison project jisonCommand Injection in jison9.8 Critical
- lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 morePrototype Pollution in lodash7.4 High
- torproject torTor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service ...7.5 High
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install...6.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups...5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Inadequate filtering on the system information...5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table...4.3 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. Lack of input filtering and escaping allows...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! through 3.9.19. A missing token check in the remove request...6.3 Medium
- apache ofbizXML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in...6.1 Medium
- apache ofbizIDOR vulnerability in the order processing feature from ecommerce component of Apache OFBiz...5.3 Medium
- eclipse web tools platform, the eclipse foundation eclipse web tools platform, debian linux +2 moreIn all versions of Eclipse Web Tools Platform through release 3.18 (2020-06), XML and DTD files...7.1 High
- mcafee web gateway (mwg), web gateway, mcafee,llc mcafee web gateway (mwg) +2 moreWeb Gateway (MWG) - Inappropriate Encoding for output context4.3 Medium
- hcltechsw hcl verse"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a...4.4 Medium
- moxa edr-g902-t firmware, edr-g902 firmware, edr-g903-t firmware +1 more +3 moreMalicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in...9.8 Critical
- tenable nessus, tenable, inc. tenable nessus +1 moreNessus 8.10.0 and earlier were found to contain a Stored XSS vulnerability due to improper...5.4 Medium
- canonical snapd, ubuntu linux +1 moreSandbox escape vulnerability via snapctl user-open (xdg-open)5.9 Medium
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper authentication for critical function ...9.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper input validation vulnerability....9.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper access control vulnerability. Successful...7.5 High
- advantech iviewAdvantech iView, versions 5.6 and prior, has an improper neutralization of special elements used...9.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, contains multiple SQL injection vulnerabilities that are...9.8 Critical
- advantech iviewAdvantech iView, versions 5.6 and prior, is vulnerable to multiple path traversal vulnerabilities...9.8 Critical
- oracle databaseVulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server....4.1 Medium
- microsoft eslint, visual studio code eslint extension +1 moreA remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when...8.8 High
- microsoft bond, bond 9.0.1 +1 moreInfinite loop in .Net Bond7.5 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +19 more +21 moreAn information disclosure vulnerability exists when the Windows GDI component improperly...6.5 Medium
- microsoft onedrive, onedrive for windows +1 moreAn elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in...7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +14 more +16 moreAn elevation of privilege vulnerability exists in the way that the SharedStream Library handles...7.8 High
- microsoft edge, edge (edgehtml-based) on windows 10 version 1607 for 32-bit systems, edge (edgehtml-based) on windows 10 version 1607 for x64-based systems +20 more +22 moreAn information disclosure vulnerability exists when Skype for Business is accessed via Microsoft...4.3 Medium
- Show moreLoading…