CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreGraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.7.5 High
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA buffer overflow could occur when parsing and validating SCTP chunks in WebRTC. This could have...9.8 Critical
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone does not check signature TTL of the EC2 credential auth method5.4 Medium
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone V3 /credentials endpoint policy logic allows to change credentials owner or target project ID8.8 High
- openstack keystoneInsufficient Session Expiration in OpenStack Keystone8.8 High
- openstack keystone, canonical ubuntu linux +1 moreOpenStack Keystone EC2 and/or credential endpoints are not protected from a scoped context8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers and community members reported memory safety bugs present in Firefox 75 and...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA race condition when running shutdown code for Web Worker led to a use-after-free vulnerability....8.1 High
- glpi-project glpiXSS in GLPI7.6 High
- glpi-project glpi, fedoraproject fedora +1 moreweak CSRF tokens in GLPI7.5 High
- glpi-project glpibypass of manageRedirect in GLPI6.1 Medium
- grinGrin allows attackers to adversely affect availability of data on a Mimblewimble blockchain5.3 Medium
- avira software updaterAn elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due...7.8 High
- glpi-project glpi, fedoraproject fedora +1 moreAble to read any token through API user endpoint in GLPI6.6 Medium
- servicenow it service managementServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid...5.4 Medium
- go-macaron macaron, fedoraproject fedora +1 moregopkg.in/macaron.v1 Open Redirect vulnerability6.1 Medium
- glpi-project glpiSQL injection on addme_observer and addme_assign in GLPI7.6 High
- requarks wiki.jsXSS in Wiki.js6.9 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes...6.5 Medium
- sae-it net-line fw-50 firmwareSAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an...9.1 Critical
- sae-it net-line fw-50 firmwareSAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly...6.1 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator, 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreIPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials4.8 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreThe certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated6.0 Medium
- silver peak systems, inc. 1. unity edgeconnect, nx, vx 2. unity orchestrator, 3. edgeconnect in aws, azure, gcp, silver-peak nx-1000 firmware, nx-10k firmware +22 more +24 moreThe certificate used to identify Orchestrator to EdgeConnect devices is not validated6.0 Medium
- commscope ruckus zoneflex r500 firmwareCSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to...8.8 High
- intelbras cip 92200 firmwareCSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping...8.8 High
- commscope ruckus zoneflex r500 firmwareRuckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.6.1 Medium
- commscope ruckus zoneflex r500 firmwareA CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access...8.1 High
- blueonyx 5209r firmwareCSRF in the /login URI in BlueOnyx 5209R allows an attacker to access the dashboard and perform...6.5 Medium
- intelbras action rf 1200 firmwareIntelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by...8.8 High
- ayision ays-wr01 firmwareAyision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in wireless settings.6.1 Medium
- ayision ays-wr01 firmwareAyision Ays-WR01 v28K.RPT.20161224 devices allow stored XSS in basic repeater settings via an SSID.5.4 Medium
- webtechideas wti like postA Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin...4.8 Medium
- internet-formation wp-advanced-searchThe Import feature in the wp-advanced-search plugin 3.3.6 for WordPress is vulnerable to...8.8 High
- zimbraCross-site scripting in Zimbra6.1 Medium
- netgear r6400 firmware, r6700 firmware, r6900 firmware +8 more +10 moreCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This...8.8 High
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear 6r7500 firmware, r6100 firmware, r7500 firmware +4 more +6 moreCertain NETGEAR devices are affected by stored XSS. This affects R9000 before 1.0.2.40, R6100...5.2 Medium
- netgear d6100 firmware, d7800 firmware, r7100lg firmware +2 more +4 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...6.8 Medium
fortune-modMageiaUpdated fortune-mod packages fixes potential security issuesNo score- google chrome, debian linux +1 moreUse after free in storage in Google Chrome prior to 81.0.4044.129 allowed a remote attacker who...9.6 Critical
rpmlintSUSE,rpmlint-miniSUSE +1 moreSecurity update for rpmlintNo score- linux kernel, netapp active iq unified manager, aff baseboard management controller +5 more +7 moreAn issue was discovered in the Linux kernel before 5.6.7. xdp_umem_reg in net/xdp/xdp_umem.c has...6.7 Medium
- linux kernelAn issue was discovered in the Linux kernel before 5.6.5. There is a use-after-free in block/bfq...7.8 High
- linux kernel, canonical ubuntu linux, opensuse leap +2 moregss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in...5.5 Medium
- linux kernelAn issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel...5.5 Medium
- linux kernelAn issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net...7.1 High
- debian linux, linux kernel, netapp a700s firmware +19 more +21 moreAn issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in...7.8 High
- linux kernelThe __mptctl_ioctl function in drivers/message/fusion/mptctl.c in the Linux kernel before 5.4.14...4.1 Medium
- Show moreLoading…