CVE-2020-2619: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Enterprise Config Management. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HT...

CVE-2020-2600: Undefined Security Weakness

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Elastic Search. Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise...

CVE-2020-2712: Undefined Security Weakness

Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 14.1.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Banking...

CVE-2020-2678: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2020-2644: Undefined Security Weakness

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Oracle Management Service. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP ...

CVE-2020-2685: Undefined Security Weakness

Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.0.1-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT...

CVE-2020-2537: Undefined Security Weakness

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Actions. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

CVE-2020-2665: Undefined Security Weakness

Vulnerability in the Oracle iSupport product of Oracle E-Business Suite component: Others. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle iSupport...

CVE-2020-2729: Undefined Security Weakness

Vulnerability in the Identity Manager product of Oracle Fusion Middleware component: Advanced Console. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Identity Manager...

CVE-2020-2730: Unrestricted Upload of File with Dangerous Type

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications component: File Upload. Supported versions that are affected are 2.7.0.0, 2.7.0.1 and 2.8.0.0. Easily exploitable vulnerability allows low privileged attacker with netwo...

Unspecified Vulnerability in Oracle Financial Services Applications FLEXCUBE Universal Banking

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The products include core banking, online banking and property management, etc. FLEXCUBE Universal Banking is one of the Internet and mobile banking solution components. An unspecified vulnerability...

CVE-2020-2572: Undefined Security Weakness

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Audit Plugin. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQ...

NewStart CGSL CORE 5.05 / MAIN 5.05 : mercurial Multiple Vulnerabilities (NS-SA-2019-0234)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has mercurial packages installed that are affected by multiple vulnerabilities: - Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized da...

JVN#79854355: Multiple vulnerabilities in Cybozu Office

Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Directory traversal in the "Customapp" function CWE-22 - CVE-2019-6022 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N| Base Score: 7.7 CVSS v2|...

CVE-2019-17335: Undefined Security Weakness

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacke...

The vulnerability of the relational database management system used by Microsoft Access programs in Microsoft Office and Office 365 allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the relational database management system used in Microsoft Access programs from Microsoft Office and Office 365 is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throu...

The vulnerability of the relational database management system used by Microsoft Access programs in Microsoft Office and Office 365 allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the relational database management system used in Microsoft Access programs from Microsoft Office and Office 365 is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information throu...

Intel Baseboard Management Controller Information Disclosure Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. An information disclosure vulnerability exists in Intel BMC, which arises from errors in the configuration of a networked system or product during operation, and can be exploited by an...

JDK: unspecified vulnerability fixed in 8u221 (Deployment)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Deployment. The supported version that is affected is Java SE: 8u221; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

NewStart CGSL CORE 5.04 / MAIN 5.04 : mercurial Multiple Vulnerabilities (NS-SA-2019-0216)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has mercurial packages installed that are affected by multiple vulnerabilities: - Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized da...