2020

IceWarp Email Server 12.3.0.1 has Incorrect Access Control for user accounts.

A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can

XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, w

LibreHealth EMR v2.0.0 is affected by a Local File Inclusion issue allowing arbitrary PHP to be included and executed wi

LibreHealth EMR v2.0.0 is affected by systemic CSRF.

LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database

LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other us

No authentication is required to control the robot inside the network, moreso the latest available user manual shows an

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Search.inc.php script

RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied input by the Preferences.php scrip

Silverstripe CMS sites through 4.4.4 which have opted into HTTP Cache Headers on responses served by the framework's HTT

Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collect

Vulnerability in the Oracle Data Masking and Subsetting product of Oracle Enterprise Manager (component: Data Masking).

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config

Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 18.1

Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that a

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Vulnerability in the Data Pump component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 1

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ver

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor

Vulnerability in the Oracle Application Express component of Oracle Database Server. Supported versions that are affecte

Jenkins Gitlab Authentication Plugin 1.5 and earlier does not perform group authorization checks properly, resulting in

Jenkins Deployer Framework Plugin 1.2 and earlier does not escape the URL displayed in the build home page, resulting in

Jenkins Matrix Authorization Strategy Plugin 2.6.1 and earlier does not escape user names shown in the configuration, re

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of

Jenkins Matrix Project Plugin 1.16 and earlier does not escape the node names shown in tooltips on the overview page of

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape correctly the 'href' attribute of links to downstream

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the job name in the 'Keep this build forever' badge t

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a bu

Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resultin

In Synergy before version 1.12.0, a Synergy server can be crashed by receiving a kMsgHelloBack packet with a client name

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). The supported version

Vulnerability in the Oracle Help Technologies product of Oracle Fusion Middleware (component: Web UIX). Supported versio

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: W

Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: W

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utili

Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses Admin Utili

Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: JVMCI). Supported versions

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Frame

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Frame

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that ar