CVE-2020-13956

CVE-2020-13956 affects Apache HttpClient prior to 4.5.13 and 5.0.3. A malformed authority component in request URIs, when passed as a java.net.URI, can cause the client to misinterpret the target host and execute the request against an unintended host. This represents a misrouting vulnerability i...

CVE-2020-14740

CVE-2020-14740 affects Oracle Database Server’s SQL Developer Install component in versions 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. A low-privilege user with Client Computer User Account privileges and logon to the environment can trigger a vulnerability that requires user interaction and can lead ...