2020 CVE Vulnerabilities

21,141 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-14546MEDIUM4.2Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supp...
CVE-2020-14545MEDIUM5Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version ...
CVE-2020-14544MEDIUM4.3Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Data, Domain & Function...
CVE-2020-14543HIGH7.3Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (compon...
CVE-2020-14542LOW3.3Vulnerability in the Oracle Solaris product of Oracle Systems (component: libsuri). The supported version that is affect...
CVE-2020-14541LOW2Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager). The supp...
CVE-2020-14540MEDIUM4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected...
CVE-2020-14539MEDIUM6.5Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af...
CVE-2020-14537MEDIUM5.5Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). The supported version that...
CVE-2020-14536HIGH7.4Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (comp...
CVE-2020-14535HIGH7.4Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). Sup...
CVE-2020-14534HIGH8.2Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Popups). The supported...
CVE-2020-14533LOW3.5Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supp...
CVE-2020-14532MEDIUM4.7Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supp...
CVE-2020-14531MEDIUM5.9Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server). Supported versions that ...
CVE-2020-14530MEDIUM5.9Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). The supported versio...
CVE-2020-14529MEDIUM5.4Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor ...
CVE-2020-14528MEDIUM6.1Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acces...
CVE-2020-14527MEDIUM5.9Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Acces...
CVE-2020-8203HIGH7.4Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.
CVE-2020-8178CRITICAL9.8Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.
CVE-2020-15572HIGH7.5Tor before 0.4.3.6 has an out-of-bounds memory access that allows a remote denial-of-service (crash) attack against Tor ...
CVE-2020-9496MEDIUM6.1XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03
CVE-2020-15700MEDIUM6.3An issue was discovered in Joomla! through 3.9.19. A missing token check in the ajax_install endpoint of com_installer c...
CVE-2020-15699MEDIUM5.3An issue was discovered in Joomla! through 3.9.19. Missing validation checks on the usergroups table object can result i...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now