Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2741▼ 480 respecto a la semana anterior

Críticas / altas1308▼ 182 respecto a la semana anterior

Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior

601 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2020-14641	Modificada	Media (4.9)	2.0%	—	Oracle Mysql Netapp Snapcenter Canonical Ubuntu Linux	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14634	Modificada	Baja (2.7)	1.8%	—	Oracle Mysql Netapp Snapcenter Canonical Ubuntu Linux	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can…
CVE-2020-14633	Modificada	Baja (2.7)	1.4%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can…
CVE-2020-14632	Modificada	Media (4.9)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14631	Modificada	Media (4.9)	2.3%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14624	Modificada	Media (4.9)	2.1%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14623	Modificada	Media (4.9)	2.0%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can…
CVE-2020-14620	Modificada	Media (4.9)	2.3%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability…
CVE-2020-14619	Modificada	Media (6.5)	2.7%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14614	Modificada	Media (4.9)	2.3%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14597	Modificada	Media (4.9)	2.1%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14591	Modificada	Media (6.5)	1.9%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+2	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this…
CVE-2020-14586	Modificada	Media (4.9)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of…
CVE-2020-14576	Modificada	Media (6.5)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks…
CVE-2020-14575	Modificada	Media (4.9)	2.4%	—	Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation Netapp Snapcenter+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability…
CVE-2020-14568	Modificada	Media (4.9)	2.4%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can…
CVE-2020-14567	Modificada	Media (4.9)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+1	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful…
CVE-2020-14559	Modificada	Media (4.3)	1.9%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise…
CVE-2020-14553	Modificada	Media (4.3)	1.9%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2020-14547	Modificada	Media (4.9)	2.5%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful…
CVE-2020-14540	Modificada	Media (4.9)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks…
CVE-2020-14539	Modificada	Media (6.5)	2.2%	—	Oracle Mysql Netapp Active IQ Unified Manager Netapp Oncommand Insight Netapp Oncommand Workflow Automation+3	15/7/2020	17/6/2026	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2020-15523	Modificada	Alta (7.8)	0.92%	—	Python Netapp Snapcenter	4/7/2020	17/6/2026	In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has…
CVE-2020-4051	Modificada	Media (5.4)	1.2%	—	Openjsf Dijit Debian Linux Netapp Active IQ Unified Manager Netapp Oncommand Insight+2	15/6/2020	17/6/2026	In Dijit before versions 1.11.11, and greater than or equal to 1.12.0 and less than 1.12.9, and greater than or equal to 1.13.0 and less than 1.13.8, and greater than or equal to 1.14.0 and less than 1.14.7, and greater than or equal to 1.15.0 and less than 1.15.4, and greater than or equal to 1.16.0 and less than…
CVE-2018-1285	Modificada	Crítica (9.8)	17%	💥 PoC	Apache Log4net Fedoraproject Fedora Oracle Application Testing Suite Oracle Hospitality Opera 5+3	11/5/2020	17/6/2026	Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.