ByteOS

Product

MySQL Server

Versions

Affected

5.6.44 and prior
5.7.26 and prior
8.0.16 and prior

Problem Types

Type	CWE ID	Description
text	N/A	Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data.

Type: text

CWE ID: N/A

Description: Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data.

References

Hyperlink	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC
https://security.netapp.com/advisory/ntap-20191017-0002/	x_refsource_CONFIRM
https://usn.ubuntu.com/4195-1/	vendor-advisory x_refsource_UBUNTU

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Resource:

x_refsource_MISC

Hyperlink: https://security.netapp.com/advisory/ntap-20191017-0002/

Resource:

x_refsource_CONFIRM

Hyperlink: https://usn.ubuntu.com/4195-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	x_refsource_MISC x_transferred
https://security.netapp.com/advisory/ntap-20191017-0002/	x_refsource_CONFIRM x_transferred
https://usn.ubuntu.com/4195-1/	vendor-advisory x_refsource_UBUNTU x_transferred

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://security.netapp.com/advisory/ntap-20191017-0002/

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://usn.ubuntu.com/4195-1/

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert_us@oracle.com

Published At:16 Oct, 2019 | 18:15

Updated At:31 Jan, 2023 | 19:06

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.2	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 6.2

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 2.0

Base score: 2.1

Base severity: LOW

Vector:

AV:L/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

>>mysql>>Versions from 5.6.0(inclusive) to 5.6.44(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

>>mysql>>Versions from 5.7.0(inclusive) to 5.7.26(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

>>mysql>>Versions from 8.0.0(inclusive) to 8.0.16(inclusive)

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

>>active_iq_unified_manager>>-

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*

>>active_iq_unified_manager>>-

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

>>oncommand_insight>>-

cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*

>>oncommand_workflow_automation>>-

cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

>>snapcenter>>-

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

>>ubuntu_linux>>16.04

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

>>ubuntu_linux>>18.04

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

>>ubuntu_linux>>19.04

cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*

>>ubuntu_linux>>19.10

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	secalert_us@oracle.com	Patch Vendor Advisory
https://security.netapp.com/advisory/ntap-20191017-0002/	secalert_us@oracle.com	Third Party Advisory
https://usn.ubuntu.com/4195-1/	secalert_us@oracle.com	Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Source: secalert_us@oracle.com

Resource:

Patch

Vendor Advisory

Hyperlink: https://security.netapp.com/advisory/ntap-20191017-0002/

Source: secalert_us@oracle.com

Resource:

Third Party Advisory

Hyperlink: https://usn.ubuntu.com/4195-1/

Source: secalert_us@oracle.com

Resource:

Third Party Advisory

Similar CVEs

288Records found

CVE-2020-29660

Matching Score-8

Assigner-MITRE Corporation

Product-a700s_firmware a400_firmware active_iq_unified_manager h410c_firmware 8300_firmware solidfire_baseboard_management_controller 8300 debian_linux linux_kernel 8700 a400 fedora a700s h410c fabric_operating_system solidfire_baseboard_management_controller_firmware 8700_firmware n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.07% / 22.23%

7 Day CHG+0.01%

Published-09 Dec, 2020 | 16:57

Updated-04 Aug, 2024 | 16:55

A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

Vendor-n/a Fedora Project Linux Kernel Organization, Inc Broadcom Inc.NetApp, Inc.Debian GNU/Linux

CWE ID-CWE-416

Use After Free

CWE ID-CWE-667

Improper Locking

CVE-2020-2894

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.12% / 30.08%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2743

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.10% / 27.44%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2741

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.10% / 27.44%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2748

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.2||LOW

EPSS-0.07% / 21.48%

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 3.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2689

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.14% / 33.99%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:54

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2692

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.93%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2705

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.93%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:52

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2727

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.14% / 32.81%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:48

CVE-2020-2681

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 30.93%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:55

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2691

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.42% / 61.75%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2022-0002

Matching Score-8

Assigner-Intel Corporation

Product-celeron_g5900t atom_c3950 xeon_gold_5215 core_i3-10100 core_i5-11400 core_i9-7900x celeron_j4125 core_i7-10510y xeon_d1700 core_i7-12650h xeon_platinum_8260y atom_x5-z8500 core_i9-7920x xeon_platinum_8352v celeron_n4120 xeon_w-11865mre core_i9-9960x core_i5-11600k core_i9-10900te xeon_e-2374g xeon_gold_5218t xeon_platinum_8358 xeon_platinum_8353h xeon_e-2378 core_i5-11260h core_i7-7820x xeon_platinum_8360y core_i3-1115g4e core_i5-10600t xeon_gold_5218n pentium_gold_g6605 core_i7-7800x xeon_w-3275m atom_x5-a3940 xeon_gold_6336y xeon_gold_6250l core_i5-9400h xeon_gold_6209u core_i9-9920x pentium_gold_g6505t xeon_e-2278ge xeon_platinum_8253 celeron_g5925 xeon_silver_4214y pentium_gold_g6505 atom_c3758 xeon_w-10855m xeon_gold_6252n core_i9-11900kf xeon_gold_6230t xeon_silver_4210r xeon_w-1270 core_i3-l13g4 atom_c3558rc pentium_gold_g6400 atom_c3308 xeon_w-3235 pentium_gold_g6500t core_i9-10900t xeon_platinum_8280 core_i5-8200y core_i7-10700te core_i9-10900k pentium_j6425 atom_x6425re xeon_gold_5220r xeon_w-11155mre xeon_gold_6252 core_i3-10105 celeron_j3455e core_i5-11400t celeron_n4020 xeon_d2700 core_i7-11700k core_i5-11400f core_i7-12700kf core_i5-10400t xeon_w-11955m xeon_w-1290e xeon_gold_6246 xeon_silver_4214r core_i7-1185g7 core_i7-9700kf core_i9-10940x celeron_6600he core_i9-9800x core_i9-10900x core_i5-12400f xeon_platinum_9221 xeon_gold_6230r celeron_n3350e xeon_platinum_8360hl celeron_j4105 puma_7 core_i7-10700kf atom_x5-z8550 xeon_silver_4310t celeron_g5905 core_i7-1065g7 core_i9-11900k xeon_w-11555mre core_i9-12900hk xeon_silver_4208 core_i5-12450h atom_x5-z8330 xeon_gold_5318h pentium_gold_g7400t core_i5-10600kf core_i3-1000g1 celeron_g6900 atom_x5-a3930 xeon_w-2225 xeon_silver_4314 core_i3-1005g1 core_i9-10850h celeron_j3355e pentium_n6415 celeron_n4504 xeon_gold_5215l core_i3-1220p core_i5-12400t core_i5-9400f core_i7-12700t xeon_platinum_8352s core_i9-12900 atom_c3538 core_i7-10700 xeon_gold_6238 atom_x6413e celeron_j6413 core_i5-11600kf core_i5-12500 core_i5-8365u atom_x5-a3960 xeon_platinum_8376h atom_c3508 xeon_w-2245 core_i5-1145gre xeon_w-3265m xeon_gold_6240l celeron_j3355 xeon_gold_6248 core_i5-1135g7 core_i7-12700 xeon_w-1270p core_i3-1115g4 xeon_gold_6258r core_i5-9600kf xeon_platinum_8256 communications_cloud_native_core_binding_support_function xeon_platinum_9282 core_i5-10400 xeon_w-1250p pentium_gold_g7400 core_i3-1120g4 core_i5-1155g7 xeon_w-11865mld core_i7-9700k core_i5-11400h xeon_gold_6338n core_i9-11900h celeron_j3455 xeon_gold_6328hl core_i7-12700f core_i7-1185g7e core_i3-1110g4 core_i3-12100f core_i3-12100t core_i7-10810u core_i3-10300t xeon_gold_6330 xeon_bronze_3206r xeon_gold_6346 xeon_w-3275 core_i5-1130g7 xeon_gold_6240 core_i7-10700e xeon_gold_5220 core_i7-1260p celeron_g5305u core_i9-11900 core_i5-9600k core_i5-8265u core_i3-10100te atom_p5921b core_i7-10700t core_i9-9900kf celeron_g5205u xeon_e-2388g communications_cloud_native_core_network_exposure_function core_i7-11390h xeon_platinum_8268 core_i5-1145g7 celeron_g5905t core_i5-9300h core_i7-10750h core_i9-10850k xeon_gold_6240r xeon_gold_6330h pentium_gold_g6405 xeon_silver_4209t core_i7-7640x xeon_gold_6338 xeon_gold_5315y core_i9-12900f xeon_e-2278g xeon_silver_4215r xeon_gold_6212u core_i9-10900e pentium_gold_g6400t celeron_g6900t pentium_silver_n6005 core_i9-11980hk atom_p5931b xeon_platinum_8380 core_i9-11900f xeon_w-3265 xeon_silver_4215 xeon_platinum_8368 xeon_gold_6230n core_i5-10500te core_i9-10920x core_i5-11500 core_i9-11950h atom_c3750 core_i7-11700 core_i5-10500t core_i5-10600 core_i7-1195g7 core_i9-10885h celeron_n4500 xeon_gold_6338t core_i5-10310y xeon_platinum_8352m xeon_e-2386g core_i7-1165g7 core_i3-12300 xeon_gold_6208u celeron_6305 core_i7-11850he atom_c3338 xeon_w-1290te pentium_gold_g6405u core_i5-1145g7e xeon_gold_6242 atom_x7-e3950 core_i7-10700k core_i3-12300t xeon_e-2336 core_i5-1030g7 celeron_j4025 core_i9-10980hk xeon_platinum_8360h xeon_e-2286m core_i9-9880h xeon_w-11155mle xeon_silver_4210t core_i7-11370h xeon_gold_5320t celeron_n4100 xeon_w-1300 core_i5-11500h core_i5-1035g4 core_i5-l16g7 core_i9-12900k core_i5-11600t xeon_gold_6342 core_i7-1280p core_i7-8500y core_i5-10200h core_i9-9900k pentium_silver_n5030 xeon_platinum_8276 pentium_silver_j5040 xeon_silver_4316 atom_c3558r core_i9-7960x xeon_gold_5220t celeron_n4000 core_i5-10400f core_i5-12600kf celeron_n6211 xeon_w-1370 core_i7-1160g7 atom_c3808 xeon_gold_6244 xeon_gold_6242r xeon_gold_6330n xeon_w-2275 xeon_w-10855 xeon_w-2265 xeon_gold_6226r core_i5-12600t core_i9-12900kf xeon_bronze_3204 core_i9-9820x celeron_j4005 xeon_gold_5218b xeon_platinum_8354h pentium_silver_n5000 xeon_gold_6348h xeon_gold_6328h core_i7-9750hf core_i7-1180g7 core_i5-12400 xeon_e-2288g xeon_w-1370p xeon_gold_6254 core_i3-10320 xeon_gold_5218r xeon_gold_6334 core_i5-1035g7 xeon_gold_6326 core_i3-10105f celeron_n3350 xeon_gold_5320 xeon_w-2235 xeon_gold_6240y celeron_g5900 atom_p5962b xeon_w-11855m atom_x5-e3940 xeon_gold_6238l xeon_w-1390 core_i7-10875h xeon_w-3225 core_i3-1115gre core_i5-11600 xeon_gold_6348 core_i7-11700f core_i3-11100he core_i5-10400h atom_x6212re pentium_gold_7505 xeon_gold_6246r celeron_n5105 core_i7-12700k core_i7-8665u xeon_gold_6354 core_i7-1270p core_i3-10305t xeon_w-10885m core_i9-9940x xeon_gold_6312u xeon_gold_5320h core_i9-9900x core_i5-10600k core_i9-7940x core_i5-10110y xeon_gold_5222 core_i7-10850h core_i5-12600h xeon_platinum_8380hl xeon_gold_6256 xeon_gold_6248r xeon_silver_4214 core_i7-12700h atom_c3958 atom_x6425e atom_c3338r xeon_gold_5318n xeon_platinum_9222 core_i3-10105t core_i5-11300h xeon_gold_5220s xeon_platinum_8260 core_i3-1000g4 pentium_silver_n6000 xeon_platinum_8280l xeon_silver_4309y core_i9-10900kf core_m3-8100y xeon_platinum_8356h atom_p5942b core_i3-10100t atom_c3858 pentium_gold_g6600 atom_x7-z8700 xeon_gold_6314u core_i9-9980hk xeon_w-11555mle core_i5-12500h core_i7-11700t pentium_j4205 xeon_w-1390t atom_x5-a3950 xeon_silver_4216 xeon_platinum_9242 core_i5-1140g7 core_i7-11700kf core_i7-10610u xeon_platinum_8362 xeon_platinum_8276l xeon_w-2223 core_i7-7740x core_i7-11375h atom_x7-z8750 atom_c3850 core_i5-11500t xeon_gold_6238t atom_c3955 core_i9-11900t core_i5-8210y xeon_platinum_8368q atom_x6427fe core_i7-1060g7 core_i5-9400 xeon_gold_5318y core_i7-1185gre xeon_silver_4310 core_i3-10325 xeon_e-2356g atom_c3558 xeon_gold_6250 celeron_6305e xeon_platinum_8260l celeron_n5100 atom_c3436l xeon_platinum_8380h xeon_platinum_8270 xeon_w-1290t xeon_w-3245m xeon_gold_6226 core_i5-11320h core_i5-12600 xeon_e-2334 xeon_gold_5318s core_i7-9850h atom_c3708 xeon_w-1350 xeon_e-2314 core_i3-10305 core_i5-1035g1 core_i7-11850h xeon_w-1290 xeon_w-1390p xeon_silver_4210 core_i3-10110u core_i5-10505 atom_x5-z8350 xeon_gold_6234 atom_c3336 core_i3-12100 xeon_w-2255 xeon_gold_6262v core_i7-10710u xeon_w-1350p core_i5-10210y core_i9-10900 xeon_w-1250 core_i5-10300h xeon_platinum_8358p pentium_n4200 core_i9-12900h atom_x5-e3930 xeon_gold_5218 atom_x6211e pentium_gold_g6500 core_i7-11800h celeron_5305u pentium_n4200e xeon_gold_6238r core_i3-10300 core_i9-10900f core_i3-1125g4 celeron_g5920 xeon_e-2278gel core_i7-8565u core_i5-1030g4 celeron_n3450 xeon_e-2378g core_i5-12600k communications_cloud_native_core_policy atom_c3830 core_i5-1240p core_i7-10870h xeon_platinum_8352y core_i3-10100f core_i7-10510u xeon_w-1290p xeon_w-3223 xeon_gold_5317 core_i7-12800h core_i5-12500t core_i5-8310y core_i9-12900t atom_x5-z8300 xeon_gold_5217 xeon_e-2324g xeon_w-3245 xeon_platinum_8376hl atom_x6200fe xeon_gold_6210u xeon_gold_6222v core_i5-1250p core_i7-10700f core_i5-10210u xeon_w-2295 atom_c3758r core_i5-10500 xeon_platinum_8351n xeon_gold_6230 pentium_silver_j5005 pentium_gold_g6405t Intel(R) Processors

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.69% / 71.99%

7 Day CHG~0.00%

Published-11 Mar, 2022 | 17:54

Updated-05 May, 2025 | 17:17

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Vendor-n/a Oracle Corporation Intel Corporation

CVE-2022-0001

Matching Score-8

Assigner-Intel Corporation

Product-celeron_g5900t xeon_gold_5215 core_i3-10100 core_i5-11400 core_i9-7900x celeron_j4125 core_i7-10510y xeon_d1700 core_i7-12650h xeon_platinum_8260y core_i9-7920x xeon_platinum_8352v celeron_n4120 xeon_w-11865mre core_i9-9960x core_i5-11600k core_i9-10900te xeon_e-2374g xeon_gold_5218t xeon_platinum_8358 xeon_platinum_8353h xeon_e-2378 core_i5-11260h core_i7-7820x xeon_platinum_8360y core_i3-1115g4e core_i5-10600t xeon_gold_5218n pentium_gold_g6605 core_i7-7800x xeon_w-3275m xeon_gold_6336y xeon_gold_6250l core_i5-9400h xeon_gold_6209u core_i9-9920x pentium_gold_g6505t xeon_e-2278ge xeon_platinum_8253 celeron_g5925 xeon_silver_4214y pentium_gold_g6505 xeon_w-10855m xeon_gold_6252n core_i9-11900kf xeon_gold_6230t xeon_silver_4210r xeon_w-1270 core_i3-l13g4 pentium_gold_g6400 xeon_w-3235 pentium_gold_g6500t core_i9-10900t xeon_platinum_8280 core_i5-8200y core_i7-10700te core_i9-10900k pentium_j6425 atom_x6425re xeon_gold_5220r xeon_w-11155mre xeon_gold_6252 core_i3-10105 core_i5-11400t celeron_n4020 xeon_d2700 core_i7-11700k core_i5-11400f core_i7-12700kf core_i5-10400t xeon_w-11955m xeon_w-1290e xeon_gold_6246 xeon_silver_4214r core_i7-1185g7 core_i7-9700kf core_i9-10940x celeron_6600he core_i9-9800x core_i9-10900x core_i5-12400f xeon_platinum_9221 xeon_gold_6230r xeon_platinum_8360hl celeron_j4105 core_i7-10700kf xeon_silver_4310t celeron_g5905 core_i7-1065g7 core_i9-11900k xeon_w-11555mre core_i9-12900hk xeon_silver_4208 core_i5-12450h xeon_gold_5318h pentium_gold_g7400t core_i5-10600kf core_i3-1000g1 celeron_g6900 xeon_w-2225 xeon_silver_4314 core_i3-1005g1 core_i9-10850h pentium_n6415 celeron_n4504 xeon_gold_5215l core_i3-1220p core_i5-12400t core_i5-9400f core_i7-12700t xeon_platinum_8352s core_i9-12900 core_i7-10700 xeon_gold_6238 atom_x6413e celeron_j6413 core_i5-11600kf core_i5-12500 core_i5-8365u xeon_platinum_8376h xeon_w-2245 core_i5-1145gre xeon_w-3265m xeon_gold_6240l xeon_gold_6248 core_i5-1135g7 core_i7-12700 xeon_w-1270p core_i3-1115g4 xeon_gold_6258r core_i5-9600kf xeon_platinum_8256 communications_cloud_native_core_binding_support_function xeon_platinum_9282 core_i5-10400 xeon_w-1250p pentium_gold_g7400 core_i3-1120g4 core_i5-1155g7 xeon_w-11865mld core_i7-9700k core_i5-11400h xeon_gold_6338n core_i9-11900h xeon_gold_6328hl core_i7-12700f core_i7-1185g7e core_i3-1110g4 core_i3-12100f core_i3-12100t core_i7-10810u core_i3-10300t xeon_gold_6330 xeon_bronze_3206r xeon_gold_6346 xeon_w-3275 core_i5-1130g7 xeon_gold_6240 core_i7-10700e xeon_gold_5220 core_i7-1260p celeron_g5305u core_i9-11900 core_i5-9600k core_i5-8265u core_i3-10100te atom_p5921b core_i7-10700t core_i9-9900kf celeron_g5205u xeon_e-2388g communications_cloud_native_core_network_exposure_function core_i7-11390h xeon_platinum_8268 core_i5-1145g7 celeron_g5905t core_i5-9300h core_i7-10750h core_i9-10850k xeon_gold_6240r xeon_gold_6330h pentium_gold_g6405 xeon_silver_4209t core_i7-7640x xeon_gold_6338 xeon_gold_5315y core_i9-12900f xeon_e-2278g xeon_silver_4215r xeon_gold_6212u core_i9-10900e pentium_gold_g6400t celeron_g6900t pentium_silver_n6005 core_i9-11980hk atom_p5931b xeon_platinum_8380 core_i9-11900f xeon_w-3265 xeon_silver_4215 xeon_platinum_8368 xeon_gold_6230n core_i5-10500te core_i9-10920x core_i5-11500 core_i9-11950h core_i7-11700 core_i5-10500t core_i5-10600 core_i7-1195g7 core_i9-10885h celeron_n4500 xeon_gold_6338t core_i5-10310y xeon_platinum_8352m xeon_e-2386g core_i7-1165g7 core_i3-12300 xeon_gold_6208u celeron_6305 core_i7-11850he xeon_w-1290te pentium_gold_g6405u core_i5-1145g7e xeon_gold_6242 core_i7-10700k core_i3-12300t xeon_e-2336 core_i5-1030g7 celeron_j4025 core_i9-10980hk xeon_platinum_8360h xeon_e-2286m core_i9-9880h xeon_w-11155mle xeon_silver_4210t core_i7-11370h xeon_gold_5320t celeron_n4100 xeon_w-1300 core_i5-11500h core_i5-1035g4 core_i5-l16g7 core_i9-12900k core_i5-11600t xeon_gold_6342 core_i7-1280p core_i7-8500y core_i5-10200h core_i9-9900k pentium_silver_n5030 xeon_platinum_8276 pentium_silver_j5040 xeon_silver_4316 core_i9-7960x xeon_gold_5220t celeron_n4000 core_i5-10400f core_i5-12600kf core_i7-1160g7 celeron_n6211 xeon_w-1370 xeon_gold_6244 xeon_gold_6242r xeon_gold_6330n xeon_w-2275 xeon_w-10855 xeon_w-2265 xeon_gold_6226r core_i5-12600t core_i9-12900kf xeon_bronze_3204 core_i9-9820x celeron_j4005 xeon_gold_5218b xeon_platinum_8354h pentium_silver_n5000 xeon_gold_6348h xeon_gold_6328h core_i7-9750hf core_i7-1180g7 core_i5-12400 xeon_e-2288g xeon_w-1370p xeon_gold_6254 core_i3-10320 xeon_gold_5218r xeon_gold_6334 core_i5-1035g7 xeon_gold_6326 core_i3-10105f xeon_w-11855m xeon_gold_5320 xeon_w-2235 xeon_gold_6240y celeron_g5900 atom_p5962b xeon_gold_6238l xeon_w-1390 core_i7-10875h xeon_w-3225 core_i3-1115gre core_i5-11600 xeon_gold_6348 core_i7-11700f core_i3-11100he core_i5-10400h atom_x6212re pentium_gold_7505 xeon_gold_6246r celeron_n5105 core_i7-12700k core_i7-8665u xeon_gold_6354 core_i7-1270p core_i3-10305t xeon_w-10885m core_i9-9940x xeon_gold_6312u xeon_gold_5320h core_i9-9900x core_i5-10600k core_i9-7940x core_i5-10110y xeon_gold_5222 core_i7-10850h core_i5-12600h xeon_platinum_8380hl xeon_gold_6256 xeon_gold_6248r xeon_silver_4214 core_i7-12700h atom_x6425e xeon_gold_5318n xeon_platinum_9222 core_i3-10105t core_i5-11300h xeon_gold_5220s xeon_platinum_8260 core_i3-1000g4 pentium_silver_n6000 xeon_platinum_8280l xeon_silver_4309y core_i9-10900kf core_m3-8100y xeon_platinum_8356h atom_p5942b core_i3-10100t pentium_gold_g6600 xeon_gold_6314u core_i9-9980hk xeon_w-11555mle core_i5-12500h core_i7-11700t xeon_w-1390t xeon_silver_4216 xeon_platinum_9242 core_i5-1140g7 core_i7-11700kf core_i7-10610u xeon_platinum_8362 xeon_platinum_8276l xeon_w-2223 core_i7-7740x core_i7-11375h xeon_gold_6238t core_i5-11500t core_i9-11900t core_i5-8210y xeon_platinum_8368q atom_x6427fe core_i7-1060g7 core_i5-9400 xeon_gold_5318y core_i7-1185gre xeon_silver_4310 core_i3-10325 xeon_e-2356g xeon_gold_6250 celeron_6305e xeon_platinum_8260l celeron_n5100 xeon_platinum_8380h xeon_platinum_8270 xeon_w-1290t xeon_w-3245m xeon_gold_6226 core_i5-11320h core_i5-12600 xeon_e-2334 xeon_gold_5318s core_i7-9850h xeon_w-1350 xeon_e-2314 core_i3-10305 core_i5-1035g1 core_i7-11850h xeon_w-1290 xeon_w-1390p xeon_silver_4210 core_i3-10110u core_i5-10505 xeon_gold_6234 core_i3-12100 xeon_w-2255 xeon_gold_6262v core_i7-10710u xeon_w-1350p core_i5-10210y core_i9-10900 xeon_w-1250 core_i5-10300h xeon_platinum_8358p core_i9-12900h xeon_gold_5218 atom_x6211e pentium_gold_g6500 core_i7-11800h celeron_5305u xeon_gold_6238r core_i3-10300 core_i9-10900f core_i3-1125g4 celeron_g5920 xeon_e-2278gel core_i7-8565u core_i5-1030g4 xeon_e-2378g core_i5-12600k communications_cloud_native_core_policy core_i5-1240p core_i7-10870h xeon_platinum_8352y core_i3-10100f core_i7-10510u xeon_w-1290p xeon_w-3223 xeon_gold_5317 core_i7-12800h core_i5-12500t core_i5-8310y core_i9-12900t xeon_gold_5217 xeon_e-2324g xeon_w-3245 xeon_platinum_8376hl atom_x6200fe xeon_gold_6210u xeon_gold_6222v core_i5-1250p core_i7-10700f core_i5-10210u xeon_w-2295 core_i5-10500 xeon_platinum_8351n xeon_gold_6230 pentium_silver_j5005 pentium_gold_g6405t Intel(R) Processors

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.29%

7 Day CHG~0.00%

Published-11 Mar, 2022 | 00:00

Updated-05 May, 2025 | 17:17

Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Vendor-n/a Oracle Corporation Intel Corporation

CVE-2020-2649

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.12% / 30.65%

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 16:00

Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Retail Customer Management and Segmentation Foundation executes to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Product-retail_customer_management_and_segmentation_foundation Retail Customer Management and Segmentation Foundation

CVE-2020-24511

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.06% / 19.29%

7 Day CHG-0.00%

Published-09 Jun, 2021 | 18:53

Updated-04 Aug, 2024 | 15:12

Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vendor-n/a Intel Corporation NetApp, Inc.Debian GNU/Linux

Product-solidfire_bios debian_linux fas\/aff_bios hci_compute_node_bios microcode Intel(R) Processors

CWE ID-CWE-668

Exposure of Resource to Wrong Sphere

CVE-2020-24512

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-3.3||LOW

EPSS-0.19% / 40.86%

7 Day CHG~0.00%

Published-09 Jun, 2021 | 18:53

Updated-04 Aug, 2024 | 15:12

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vendor-n/a Intel Corporation NetApp, Inc.Debian GNU/Linux

Product-solidfire_bios debian_linux fas\/aff_bios hci_compute_node_bios microcode Intel(R) Processors

CWE ID-CWE-203

Observable Discrepancy

CVE-2007-0296

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-2.1||LOW

EPSS-0.36% / 58.29%

7 Day CHG~0.00%

Published-17 Jan, 2007 | 02:00

Updated-23 Apr, 2026 | 00:35

Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and attack vectors in PeopleTools, aka PSE02.

Product-peoplesoft_enterprise enterpriseone n/a

CVE-2020-16123

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-4.4||MEDIUM

EPSS-0.09% / 24.52%

7 Day CHG~0.00%

Published-03 Dec, 2020 | 23:15

Updated-16 Sep, 2024 | 19:20

Bypass of snapd pulseaudio restrictions

An Ubuntu-specific patch in PulseAudio created a race condition where the snap policy module would fail to identify a client connection from a snap as coming from a snap if SCM_CREDENTIALS were missing, allowing the snap to connect to PulseAudio without proper confinement. This could be exploited by an attacker to expose sensitive information. Fixed in 1:13.99.3-1ubuntu2, 1:13.99.2-1ubuntu2.1, 1:13.99.1-1ubuntu3.8, 1:11.1-1ubuntu7.11, and 1:8.0-0ubuntu3.15.

Vendor-Canonical Ltd.

Product-ubuntu_linux pulseaudio

CWE ID-CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

CVE-2020-16120

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-5.1||MEDIUM

EPSS-0.06% / 19.47%

7 Day CHG+0.02%

Published-10 Feb, 2021 | 19:45

Updated-16 Sep, 2024 | 18:49

Unprivileged overlay + shiftfs read access

Overlayfs did not properly perform permission checking when copying up files in an overlayfs and could be exploited from within a user namespace, if, for example, unprivileged user namespaces were allowed. It was possible to have a file not readable by an unprivileged user to be copied to a mountpoint controlled by the user, like a removable device. This was introduced in kernel version 4.19 by commit d1d04ef ("ovl: stack file ops"). This was fixed in kernel version 5.8 by commits 56230d9 ("ovl: verify permissions in ovl_path_open()"), 48bd024 ("ovl: switch to mounter creds in readdir") and 05acefb ("ovl: check permission to open real file"). Additionally, commits 130fdbc ("ovl: pass correct flags for opening real directory") and 292f902 ("ovl: call secutiry hook in ovl_real_ioctl()") in kernel 5.8 might also be desired or necessary. These additional commits introduced a regression in overlay mounts within user namespaces which prevented access to files with ownership outside of the user namespace. This regression was mitigated by subsequent commit b6650da ("ovl: do not fail because of O_NOATIMEi") in kernel 5.11.

Vendor-Linux kernel Linux Kernel Organization, Inc Canonical Ltd.

Product-ubuntu_linux linux_kernel Linux kernel

CWE ID-CWE-266

Incorrect Privilege Assignment

CVE-2020-16121

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-3.3||LOW

EPSS-0.10% / 27.46%

7 Day CHG~0.00%

Published-07 Nov, 2020 | 04:10

Updated-17 Sep, 2024 | 04:04

PackageKit error messages leak presence and mimetype of files to unprivileged users

PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own.

Vendor-packagekit_project PackageKit Canonical Ltd.

Product-packagekit ubuntu_linux PackageKit

CWE ID-CWE-209

Generation of Error Message Containing Sensitive Information

CVE-2020-17521

Matching Score-8

Assigner-Apache Software Foundation

Matching Score-8

Assigner-Apache Software Foundation

CVSS Score-5.5||MEDIUM

EPSS-2.36% / 85.04%

7 Day CHG~0.00%

Published-07 Dec, 2020 | 19:22

Updated-04 Aug, 2024 | 14:00

Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.

Vendor-NetApp, Inc.The Apache Software Foundation Oracle Corporation

CVE-2020-16128

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-3.8||LOW

EPSS-0.04% / 11.68%

7 Day CHG~0.00%

Published-09 Dec, 2020 | 03:35

Updated-16 Sep, 2024 | 16:24

Aptdaemon error messages disclosed file existence to unprivileged users via dbus properties

The aptdaemon DBus interface disclosed file existence disclosure by setting Terminal/DebconfSocket properties, aka GHSL-2020-192 and GHSL-2020-196. This affected versions prior to 1.1.1+bzr982-0ubuntu34.1, 1.1.1+bzr982-0ubuntu32.3, 1.1.1+bzr982-0ubuntu19.5, 1.1.1+bzr982-0ubuntu14.5.

Vendor-Canonical Ltd.

Product-ubuntu_linux aptdaemon

CWE ID-CWE-209

Generation of Error Message Containing Sensitive Information

CVE-2020-14347

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 18.23%

7 Day CHG~0.00%

Published-05 Aug, 2020 | 13:08

Updated-29 Aug, 2025 | 13:42

A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server runs with elevated privileges, this could result in possible ASLR bypass. Xorg-server before version 1.20.9 is vulnerable.

Vendor-Canonical Ltd.Debian GNU/Linux X.Org Foundation

Product-debian_linux ubuntu_linux x_server xorg-x11-server

CWE ID-CWE-665

Improper Initialization

CVE-2020-14542

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.06% / 19.47%

7 Day CHG~0.00%

Published-15 Jul, 2020 | 17:34

Updated-27 Sep, 2024 | 18:42

Vulnerability in the Oracle Solaris product of Oracle Systems (component: libsuri). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Solaris accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Product-solaris Solaris Operating System

CVE-2020-12392

Matching Score-8

Assigner-Mozilla Corporation

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.16% / 36.29%

7 Day CHG~0.00%

Published-26 May, 2020 | 17:01

Updated-04 Aug, 2024 | 11:56

The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted the command into a terminal, it could have resulted in the disclosure of local files. This vulnerability affects Firefox ESR < 68.8, Firefox < 76, and Thunderbird < 68.8.0.

Vendor-Mozilla Corporation Canonical Ltd.

Product-firefox ubuntu_linux thunderbird firefox_esr Firefox Firefox ESR Thunderbird

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2013-2415

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.08% / 24.10%

7 Day CHG~0.00%

Published-17 Apr, 2013 | 15:00

Updated-29 Apr, 2026 | 01:13

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "processing of MTOM attachments" and the creation of temporary files with weak permissions.

Product-jre jdk n/a

CVE-2017-10356

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.2||MEDIUM

EPSS-0.69% / 71.94%

7 Day CHG~0.00%

Published-19 Oct, 2017 | 17:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE, Java SE Embedded, JRockit executes to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded, JRockit accessible data. Note: This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 6.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vendor-Debian GNU/Linux Red Hat, Inc.Oracle Corporation NetApp, Inc.

CVE-2017-10189

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 30.64%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Suite8 executes to compromise Hospitality Suite8. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Hospitality Suite8 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-hospitality_suite8 Hospitality Suite8

CVE-2017-10231

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 30.64%

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AWExport). The supported version that is affected is 2.2.05.062. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality Cruise AffairWhere executes to compromise Oracle Hospitality Cruise AffairWhere. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Cruise AffairWhere accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-hospitality_cruise_affairwhere Hospitality Cruise AffairWhere

CVE-2016-8967

Matching Score-8

Assigner-IBM Corporation

Vendor-Linux Kernel Organization, Inc Oracle Corporation HP Inc.IBM Corporation Microsoft Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.05% / 14.12%

7 Day CHG~0.00%

Published-01 Feb, 2017 | 21:00

Updated-20 Apr, 2025 | 01:37

IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.

Product-bigfix_inventory license_metric_tool aix solaris hp-ux linux_kernel windows BigFix Inventory

CVE-2020-11932

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-2.3||LOW

EPSS-1.71% / 82.49%

7 Day CHG~0.00%

Published-13 May, 2020 | 00:20

Updated-16 Sep, 2024 | 23:05

Subiquity server installer logged LUKS full disk encryption password

It was discovered that the Subiquity installer for Ubuntu Server logged the LUKS full disk encryption password if one was entered.

Vendor-Canonical Ltd.

Product-subiquity Subiquity

CWE ID-CWE-532

Insertion of Sensitive Information into Log File

CVE-2020-12356

Matching Score-8

Assigner-Intel Corporation

Matching Score-8

Assigner-Intel Corporation

CVSS Score-4.4||MEDIUM

EPSS-0.14% / 34.34%

7 Day CHG~0.00%

Published-12 Nov, 2020 | 18:09

Updated-04 Aug, 2024 | 11:56

Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user to potentially enable information disclosure via local access.

Vendor-n/a Intel Corporation NetApp, Inc.

Product-cloud_backup active_management_technology_firmware Intel(R) AMT

CWE ID-CWE-125

Out-of-bounds Read

CVE-2019-2863

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.10% / 27.53%

7 Day CHG-0.00%

Published-23 Jul, 2019 | 22:31

Updated-01 Oct, 2024 | 16:35

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2018-6559

Matching Score-8

Assigner-Canonical Ltd.

Matching Score-8

Assigner-Canonical Ltd.

CVSS Score-3.3||LOW

EPSS-0.08% / 24.36%

7 Day CHG~0.00%

Published-26 Oct, 2018 | 17:00

Updated-16 Sep, 2024 | 19:19

The Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10, allows local users to obtain names of files in which they would not normally be able to access via an overlayfs mount inside of a user namespace.

Vendor-Linux Kernel Organization, Inc Canonical Ltd.

Product-ubuntu_linux linux_kernel Linux kernel, as used in Ubuntu 18.04 LTS and Ubuntu 18.10

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2019-3026

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 29.81%

7 Day CHG~0.00%

Published-16 Oct, 2019 | 17:40

Updated-01 Oct, 2024 | 16:21

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2016-6224

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-3.3||LOW

EPSS-0.06% / 17.63%

7 Day CHG~0.00%

Published-22 Jul, 2016 | 14:00

Updated-06 May, 2026 | 22:30

ecryptfs-setup-swap in eCryptfs does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning on a (1) NVMe or (2) MMC drive, which allows local users to obtain sensitive information via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-8946.

Vendor-ecryptfs n/a Canonical Ltd.

Product-ubuntu_linux ecryptfs-utils n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2017-15517

Matching Score-8

Assigner-NetApp, Inc.

Matching Score-8

Assigner-NetApp, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.18% / 39.13%

7 Day CHG~0.00%

Published-17 Nov, 2017 | 00:00

Updated-20 Apr, 2025 | 01:37

AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fixed version and change passwords used by Veritas NetBackup to access the OST shares on the NetApp AltaVault as a precaution.

Vendor-NetApp, Inc.

Product-altavault_ost_plug-in AltaVault OST Plug-in

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5611

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.05% / 14.19%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.

Product-vm_virtualbox n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5498

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.05% / 13.97%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499.

Product-database_server n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5517

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 18.91%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 allows local users to affect confidentiality via vectors related to AD Utilities.

Product-applications_dba n/a

CWE ID-CWE-284

Improper Access Control

CVE-2016-5452

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 26.07%

7 Day CHG~0.00%

Published-21 Jul, 2016 | 10:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot.

Product-solaris n/a

CVE-2013-1940

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-2.1||LOW

EPSS-0.08% / 23.16%

7 Day CHG~0.00%

Published-13 May, 2013 | 23:00

Updated-29 Apr, 2026 | 01:13

X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does not properly restrict access to input events when adding a new hot-plug device, which might allow physically proximate attackers to obtain sensitive information, as demonstrated by reading passwords from a tty.

Vendor-n/a Canonical Ltd.X.Org Foundation

Product-x.org-xserver ubuntu_linux n/a

CVE-2016-5508

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.05% / 13.97%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 4.3 allows local users to affect confidentiality via vectors related to Cluster Geo.

Product-solaris_cluster n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-0543

Matching Score-8

Assigner-Intel Corporation

Product-celeron_2957u xeon_e3-1230_v5 xeon_e3-1558l_v5 core_i3-6300 core_i7-4790t core_m-5y3 core_i7-5775r celeron_5305u core_i7-4765t core_i3-4025u core_i7-9700kf core_i7-4785t core_i5-8400h celeron_g3940 core_i3-4120u core_i5-7y54 core_i3-3250 core_i5-4440 simatic_ipc547g_firmware core_i5-3470s core_i3-2115c xeon_e-2226g core_i9-9900kf pentium_g4400t xeon_e3-1226_v3 xeon_e3-1280_v5 xeon_e3-1265l_v2 core_i7-8670 pentium_a1018_v2 core_i3-8145u core_i7-6822eq core_i5-4258u core_i7-6700te core_i3-7020u core_i7-4770r xeon_e3-1501l_v6 core_i3-8109u core_i5-4260u core_i7-7600u core_i5-4670k xeon_e-2224 core_i5-10110y core_i7-3770 celeron_g1830 core_i3-7100e core_i7-4770 pentium_g3258 xeon_e3-1505l_v6 xeon_e-2278ge core_m5-6y54 simatic_field_pg_m6_firmware simatic_ipc427d_firmware core_i5-4690t core_i5-6600k core_4415y core_i5-5675c core_i3-4360 core_i7-4600u celeron_1020e core_i5-8400b simatic_ipc427e_firmware simatic_ipc647d_firmware core_i7-4980hq core_i7-4710hq core_i5-5250u pentium_g4420 celeron_1020m core_i7-7820hk core_i3-i3-8100h core_i7-5850hq core_i3-4170 core_m-5y10c core_i5-8550 core_i3-4160t xeon_e-2184g core_i7-6970hq core_i5-3340m xeon_e3-1265l_v4 core_i3-6120t core_i5-7500u core_i5-8600 celeron_g3930te core_i5-3317u xeon_e-2136 core_i7-10510u core_i7-9700k celeron_3865u core_i3-8100 simatic_ipc527g pentium_g3460t core_m7-6y75 core_i3-3220 pentium_g3440 celeron_g4900t core_m3-6y30 core_i5-4570r fedora simatic_ipc477d_firmware core_4205u xeon_e3-1535m_v5 simatic_ipc527g_firmware core_i7-7700 core_m-5y10 simatic_field_pg_m5 core_i3-7102e core_i7-4712hq xeon_e3-1268l_v5 celeron_2955u core_i5-8600k simatic_ipc477e_firmware core_i5-3550 simatic_field_pg_m6 core_i7-8750h xeon_e3-1501m_v6 core_i5-8365u simatic_ipc827d core_i5-4278u core_i5-9600kf celeron_927ue celeron_g4930 core_i5-7600 core_i3-3227u core_i5-3437u pentium_g5400t core_i5-4460 xeon_e3-1270_v6 core_i7-3920xm pentium_g2120_v2 pentium_g3220 xeon_e-2286m xeon_e3-1505m_v5 pentium_g2020t_v2 core_i3-5006u pentium_3560m pentium_3561y core_i7-5650u xeon_e-2276g core_i3-8300 xeon_e-2186g core_i3-5005u core_i5-7400t simatic_ipc627d core_i3-5020u pentium_g3440t xeon_e-2174g core_i7-8809g xeon_e3-1105c core_i5-5257u core_i5-7260u core_i7-8700b core_m-5y70 xeon_e3-1280_v2 xeon_e3-1220_v2 simotion_p320-4s_firmware core_i7-3612qe pentium_g5420t core_i5-4440s core_i5-7267u pentium_g3430 core_i5-7y57_xeon_e3-1585_v5 core_i5-10210y core_i5-4402ec celeron_2970m core_i7-6560u pentium_g4420t pentium_g3460 simatic_ipc477e_pro_firmware core_i5-8300h core_i3-4020y core_i3-4160 pentium_3558u core_i3-3229y core_i7-5600u xeon_e3-1280_v3 xeon_e3-1285_v3 core_i5-3450 pentium_3805u core_4410y xeon_e3-1281_v3 simatic_ipc647e_firmware core_i7-3632qm xeon_e3-1240l_v3 pentium_gold_6405u celeron_g4920 core_i3-6167u xeon_e-2274g core_i7-3517u celeron_g1820 xeon_e-2278gel core_i5-3570 xeon_e3-1270_v2 xeon_e3-1280_v6 xeon_e3-1225_v3 core_i5-5200u simatic_ipc347e_firmware core_i7-7740x pentium_1405_v2 core_i7-6500u core_i3-3240t core_i3-7110u core_i3-8120 celeron_g3902e xeon_e-2124 core_i9-9880h core_i5-7287u xeon_e3-1275_v3 simotion_p320-4e core_i7-3940xm core_i7-4950hq core_i7-3740qm celeron_1047ue core_i5-6300u core_i7-4700hq xeon_e-2276me core_i7-8565u xeon_e3-1125c core_i7-4770hq core_i7-4910mq celeron_1019y core_i5-7300hq core_i7-7560u xeon_e3-1271_v3 core_i3-6100h xeon_e3-1535m_v6 simatic_ipc827d_firmware core_i5-8259u xeon_e3-1220_v5 core_i7-4860hq core_i7-3770k celeron_3765u simatic_ipc847e core_i5-4300u core_i3-3130m simatic_ipc427e core_i7-6700hq pentium_2127u_v2 simatic_ipc427d pentium_3665u core_i3-3217ue core_i7-4850hq pentium_g3260 core_i3-3240 simotion_p320-4s core_i5-6350hq pentium_3215u core_i3-4150 core_i5-7600t pentium_g2030_v2 simatic_ipc3000_smart core_i5-3360m simatic_ipc547e core_i7-4702mq core_i3-4100u core_i5-4220y pentium_g3240 xeon_e3-1258l_v4 core_i7-7500u core_i7-8550u ubuntu_linux xeon_e-2224g threat_intelligence_exchange_server core_i7-3687u core_i7-4558u core_i7-4550u core_i7-4770s xeon_e-2226ge core_i7-6650u core_i3-4340 core_i3-4005u core_m-5y71 core_i5-6210u core_i7-3612qm pentium_g5420 pentium_g2140_v2 core_i3-7167u celeron_g1620 core_i3-6100t core_i5-9400h core_i7-8500y core_i7-7567u leap core_i7-5557u core_i7-4960hq xeon_e3-1286_v3 core_i5-4308u pentium_g2020_v2 celeron_3755u core_i7-4710mq xeon_e3-1230_v3 simatic_field_pg_m5_firmware simatic_ipc847d_firmware core_i7-7820hq pentium_g5500t xeon_e3-1585l_v5 celeron_g3920t core_i5-8210y core_i7-3520m pentium_b915c core_i3-6100e celeron_2980u celeron_3955u core_i5-4210u xeon_e3-1275_v5 xeon_e3-1221_v3 xeon_e3-1240_v5 xeon_e3-1230l_v3 core_i7-6567u simatic_ipc677e core_i7-5775c core_i3-7101e core_i7-3770t xeon_e3-1515m_v5 xeon_e3-1225_v5 core_i5-8500 core_i7-3635qm core_9300h core_i7-4790s core_i7-7510u core_i5-4570s core_i7-8510y core_i3-4350t celeron_g1610t core_i5-8265u pentium_3765u core_i7-5700eq core_i3-4012y core_i3-6110u core_i3-7007u core_i5-6300hq xeon_e-2254me simatic_field_pg_m4 core_i5-6440hq core_i7-7y75 core_i7-4702ec core_i7-6700 xeon_e3-1220_v3 core_i3-8350k core_i5-3337u core_i5-7500t xeon_e3-1505m_v6 core_i5-3470 core_i7-3689y core_i7-7700k core_i7-8705g pentium_g3450 core_i7-8665u xeon_e-2276m core_i3-8300t core_i7-7660u core_i7-6600u core_i7-8706g xeon_e3-1220l_v2 core_i3-4330 core_i3-4170t xeon_e3-1565l_v5 xeon_e-2236 core_i7-3537u core_i7-4500u xeon_e3-1240_v6 core_i5-6310u core_i7-8700 pentium_g3260t celeron_2981u core_i3-6300t core_i5-3330 core_i3-6120 core_i5-8400 pentium_g3250t core_i5-3380m core_i7-3517ue core_i7-3720qm core_i7-7700t core_i5-10210u core_i5-4350u pentium_2030m_v2 core_i7-6770hq core_i7-8700k xeon_e3-1268l_v3 core_m-5y10a simatic_ipc347e core_i7-5850eq core_i7-4578u core_i5-7442eq xeon_e-2134 pentium_2129y_v2 core_i5-3550s core_i3-4130t pentium_g4500t core_i3-3220t core_i7-4771 core_i5-4590s xeon_e3-1285_v6 core_i7-3667u celeron_725c xeon_e3-1278l_v4 core_i3-3120m core_i5-4250u xeon_e3-1220l_v3 xeon_e3-1225_v6 core_i3-4100m simatic_ipc847d core_i7-10510y xeon_e3-1240l_v5 core_i7-4722hq core_i5-4430s simatic_ipc477e core_i5-6442eq core_i7-4790 simatic_field_pg_m4_firmware core_i5-8420t celeron_g3900 core_i5-9600k xeon_e3-1290_v2 pentium_3205u xeon_e3-1286l_v3 xeon_e3-1125c_v2 core_i5-3340 core_i7-7700hq pentium_g5600 core_i7-3540m xeon_e3-1245_v3 core_i7-3610qe core_i3-8100h xeon_e3-1245_v5 core_i7-6870hq xeon_e3-1230_v2 pentium_3556u pentium_g4500 celeron_1005m core_i5-4210h core_i5-3330s pentium_g3220t core_i5-8350u core_i7-4800mq core_i3-4010y core_i7-4750hq core_i5-7300u pentium_2117u_v2 xeon_e3-1240_v2 xeon_e-2246g core_i5-8500t core_8269u core_i5-7500 core_i5-4670r core_i3-4110m core_i5-4670t core_i5-3610me core_i5-4690 core_i7-4700eq core_i3-4370t core_i5-6400 pentium_3825u pentium_b925c xeon_e3-1241_v3 simatic_ipc677d core_i5-3427u core_i5-7200u pentium_g4540 core_i5-3570s pentium_g2030t_v2 celeron_g1820t celeron_g3930e simatic_ipc847e_firmware core_i7-4702hq core_i9-8950hk pentium_g4520 core_i7-3820qm pentium_4405u core_i5-5350 core_i7-7920hq xeon_e-2254ml xeon_e3-1545m_v5 core_i5-8400t core_i3-5015u core_i5-4590 simatic_ipc477e_pro core_i3-4158u core_m-5y51 core_i5-8420 core_i7-8670t xeon_e3-1578l_v5 core_i7-6660u xeon_e3-1270_v5 celeron_3965u core_i7-4720hq core_i7-5500u xeon_e3-1260l_v5 simatic_ipc647e core_i7-3840qm_core_i5-4570 xeon_e3-1246_v3 core_i3-7100h celeron_g1840 core_i3-3245 core_i3-4370 xeon_e3-1265l xeon_e3-1235_v2 core_i7-4610y xeon_e-2276ml xeon_e-2244g celeron_1037u core_i9-9900k xeon_e-2176g core_i5-4460t xeon_e3-1275l_v3 simatic_ipc3000_smart_firmware core_i3-4350 celeron_g1630 core_i3-6320t core_i5-3320m core_i5-4670 core_i3-7120 core_i7-8709g simatic_ipc627e core_i5-6287u core_i5-4210y core_i7-4712mq core_i5-9400 core_i3-8100t pentium_4415u core_i7-4510u core_i7-5950hq core_i5-6500t core_i5-6260u core_i3-7120t core_i7-8557u core_i7-5550u xeon_e3-1245_v2 simatic_ipc547g celeron_g1610 core_i7-8700t core_i3-4150t core_i7-4770k core_i3-4030u core_i7-6820hq core_i5-7400 core_i7-8650u core_i7-3615qm core_i5-4200u core_i5-6600 core_i7-6700t core_i7-6920hq core_i3-3115c core_i3-6100u xeon_e3-1230_v6 core_i3-4330t pentium_g4400te core_i3-3110m core_i5-4670s xeon_e3-1276_v3 simatic_ipc627e_firmware core_i5-8500b xeon_e-2124g core_i5-5575r xeon_e3-1231_v3 core_i5-3230m simotion_p320-4e_firmware xeon_e-2288g core_i5-3475s xeon_e-2234 core_i7-4900mq pentium_g4520t core_i3-6320 core_i5-9400f core_i7-6700k core_i3-8000 core_i7-9850h pentium_3560y core_i3-7320t core_i5-7440eq celeron_1007u core_i7-8560u celeron_g3900t core_i7-3770s core_i5-4690s core_i3-8000t celeron_g3920 core_i5-6400t pentium_g2130_v2 core_i3-7100u celeron_g1850 core_i5-5287u core_i3-7101te simatic_ipc677d_firmware core_i5-3570t xeon_e3-1105c_v2 core_i5-7600k core_m5-6y57 core_i5-8250u pentium_g2010_v2 core_5405u simatic_ipc547e_firmware xeon_e-2126g core_i5-3340s core_i3-4130 core_i7-7820eq core_i5-3570k celeron_g1840t core_i5-4300y core_i5-7360u xeon_e3-1240_v3 core_i7-4700mq core_i5-6500 core_i3-7340 celeron_1017u core_9750hf core_i3-5157u xeon_e3-1220_v6 core_i5-6200u core_i5-3339y core_m3-8100y simatic_ipc477d core_i5-5675r xeon_e3-1225_v2 xeon_e-2186m core_i3-4030y simatic_itp1000_firmware xeon_e-2176m xeon_e3-1285_v4 core_i3-3250t core_i7-6820hk pentium_g3420 pentium_g3420t pentium_g4400 core_i3-3120me core_i5-4570t core_i5-10310y core_i7-3615qe core_i7-3630qm xeon_e-2284g core_i3-6102e core_i3-3210 core_i5-6600t core_i5-4430 core_i3-8020 core_i5-3439y core_i7-4810mq xeon_e3-1275_v6 core_i7-6510u xeon_e3-1575m_v5 xeon_e-2278g xeon_e3-1505l_v5 xeon_e3-1245_v6 core_i3-4010u core_i7-8850h core_i5-7210u core_i3-7130u core_i7-4650u core_i7-3555le core_i7-4760hq simatic_itp1000 core_i5-5350u core_i7-4700ec core_i7-6820eq core_i7-3610qm core_i7-4770t core_i5-8650 simatic_ipc647d core_i5-6500te xeon_e3-1235l_v5 core_i7-5700hq core_m3-7y30 xeon_e3-1285l_v3 core_i5-4202y core_i5-4302y celeron_g4950 celeron_1000m core_i3-4360t pentium_g2120t_v2 core_i3-3225 celeron_g4900 pentium_4405y core_i3-3217u core_i3-5010u pentium_g5500 xeon_e3-1275_v2 core_i5-8200y core_i3-6100 core_i5-4460s core_i5-8310y core_i5-7640x pentium_g3450t simatic_ipc627d_firmware celeron_g1620t core_i5-7440hq core_i5-6360u xeon_e-2144g core_i7-8569u core_i5-8650k core_i5-3470t core_i7-5750hq core_i5-4590t core_i5-6267u core_i5-3350p core_i5-4288u celeron_3965y pentium_g3470 core_i5-3450s celeron_g3900te pentium_g3240t core_i5-3210m celeron_3855u simatic_ipc677e_firmware core_i5-6440eq core_i5-4200y core_i5-8600t core_i5-8305g core_i9-9980hk core_i7-4870hq core_i7-8559u pentium_g2100t_v2 xeon_e-2146g core_i3-6100te pentium_g3250 core_i3-8130u pentium_g5400 pentium_2020m_v2 xeon_e3-1270 Intel(R) Processors

Matching Score-8

Assigner-Intel Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.48% / 65.22%

7 Day CHG-0.04%

Published-15 Jun, 2020 | 13:55

Updated-04 Aug, 2024 | 06:02

Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Vendor-n/a Intel Corporation McAfee, LLC Siemens AG Fedora Project openSUSE Canonical Ltd.

CWE ID-CWE-459

Incomplete Cleanup

CVE-2016-5505

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.70%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the RDBMS Programmable Interface component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.

Product-database_server n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5490

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.05% / 15.78%

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-06 May, 2026 | 22:30

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect confidentiality via vectors related to INFRA.

Product-flexcube_universal_banking n/a

CVE-2020-0067

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

Matching Score-8

Assigner-Android (associated with Google Inc. or Open Handset Alliance)

CVSS Score-4.4||MEDIUM

EPSS-0.06% / 17.44%

7 Day CHG~0.00%

Published-17 Apr, 2020 | 18:03

Updated-04 Aug, 2024 | 05:47

In f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation.Product: Android. Versions: Android kernel. Android ID: A-120551147.

Vendor-n/a Canonical Ltd.Google LLC

Product-android ubuntu_linux Android

CWE ID-CWE-125

Out-of-bounds Read

CVE-2016-4482

Matching Score-8

Assigner-MITRE Corporation

Product-suse_linux_enterprise_software_development_kit ubuntu_linux suse_linux_enterprise_debuginfo suse_linux_enterprise_real_time_extension suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_workstation_extension fedora suse_linux_enterprise_desktop linux_kernel n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-6.2||MEDIUM

EPSS-0.03% / 10.22%

7 Day CHG~0.00%

Published-23 May, 2016 | 10:00

Updated-06 May, 2026 | 22:30

The proc_connectinfo function in drivers/usb/core/devio.c in the Linux kernel through 4.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory via a crafted USBDEVFS_CONNECTINFO ioctl call.

Vendor-n/a Canonical Ltd.Linux Kernel Organization, Inc Novell Fedora Project

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-4578

Matching Score-8

Assigner-MITRE Corporation

Product-debian_linux ubuntu_linux enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_tus enterprise_linux_desktop leap enterprise_linux_server_eus enterprise_linux_server_aus linux_kernel opensuse n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.17% / 37.45%

7 Day CHG~0.00%

Published-23 May, 2016 | 10:00

Updated-06 May, 2026 | 22:30

sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) snd_timer_user_ccallback and (2) snd_timer_user_tinterrupt functions.

Vendor-n/a Canonical Ltd.openSUSE Linux Kernel Organization, Inc Red Hat, Inc.Debian GNU/Linux

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-4569

Matching Score-8

Assigner-MITRE Corporation