CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service Vulnerabilities8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software Shell Access Vulnerability6.7 Medium
- cisco umbrellaCisco Umbrella Carriage Return Line Feed Injection Vulnerability4.7 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software VPN System Logging Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software Management Interface Denial of Service Vulnerability5.3 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +12 more +14 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability9.1 Critical
- cisco adaptive security appliance (asa) software, adaptive security appliance software, secure firewall threat defense +2 moreCisco Firepower 2100 Series Security Appliances ARP Denial of Service Vulnerability7.4 High
- cisco ucs director, ucs director express for big data, integrated management controller supervisor +2 moreCisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control Vulnerability4.3 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Static Credential Vulnerabilities8.1 High
- cisco firepower threat defense software, ios, secure firewall management center +1 more +3 moreMultiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability5.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Cross-Site Scripting Vulnerability6.5 Medium
- cisco firepower threat defense software, secure firewall management center +1 moreCisco Firepower Threat Defense Software Information Disclosure Vulnerability5.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Open Redirect Vulnerability4.3 Medium
- cisco firepower device manager on-box, firepower threat defense software +1 moreCisco Firepower Device Manager On-Box Software XML Parsing Vulnerability5.5 Medium
- cisco firepower device manager on-box, firepower threat defense software +1 moreCisco Firepower Device Manager On-Box Software Arbitrary File Overwrite Vulnerability6.5 Medium
- cisco adaptive security appliance software, adaptive security appliance (asa) software, asa 5505 firmware +11 more +13 moreCisco Adaptive Security Appliance Software Kerberos Authentication Bypass Vulnerability8.1 High
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service Vulnerability8.6 High
- cisco content security management appliance (sma), content security management appliance +1 moreCisco Content Security Management Appliance Open Redirect Vulnerabilities6.1 Medium
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software Management Access List Bypass Vulnerability5.3 Medium
- google android, samsung android os +1 moreMemory corruption in Quram library when decoding qmg can lead to RCE10.0 Critical
- mongodb, mongodb inc. server, mongodb, inc. mongodb server +2 moreAdministrative action may disable enforcement of per-user IP whitelisting4.6 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 more/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.6.5 Medium
- ibm business automation workflow, business process manager, business process manager standard +2 moreIBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0...4.3 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user...5.0 Medium
- ibm infosphere information server, infosphere information server on cloud, infosphere qualitystage +2 moreIBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting....5.4 Medium
- ibm maximo anywhereIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak...2.4 Low
- ledger moneroA flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S...5.5 Medium
- redhat hibernate validator, hibernate hibernate-validator, ibm websphere application server +5 more +7 moreImproper Input Validation in Hibernate Validator5.3 Medium
- raonwiz dext5, dext.ocx activex control in dext5 upload +1 moreDext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow...7.8 High
- raonwiz dext5, dext.ocx activex control in dext5 upload +1 moreDext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow...7.8 High
- tobesoft xplatformTobesoft Xplatform ActiveX File Download Vulnerability7.8 High
- tobesoft nexacro, nexacro14 +1 moreTobesoft Nexacro14 ActiveX File Download Vulnerability7.8 High
- jenkins project scm filter jervis plugin, jenkins source code management filter jervis +1 moreRCE vulnerability in SCM Filter Jervis Plugin8.8 High
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreUsers with Overall/Read access can enumerate credentials IDs in Amazon EC2 Plugin4.3 Medium
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreLack of SSL/TLS certificate and hostname validation in Amazon EC2 Plugin5.6 Medium
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreCSRF vulnerability in Amazon EC2 Plugin4.3 Medium
- jenkins amazon ec2, jenkins project amazon ec2 plugin +1 moreMissing SSH host key validation in Jenkins Amazon EC2 Plugin5.6 Medium
- jenkins project cvs plugin, jenkins current versions systems +1 moreCSRF vulnerability in Jenkins CVS Plugin4.3 Medium
- jenkins copy artifact, jenkins project copy artifact plugin +1 moreImproper permission checks in Jenkins Copy Artifact Plugin6.5 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreImproper masking of some secrets in Jenkins Credentials Binding Plugin4.3 Medium
- jenkins credentials binding, jenkins project credentials binding plugin +1 moreSecrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps6.5 Medium
- tobesoft xplatformTobesoft XPlatform Arbitrary File Execution Vulnerability7.8 High
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser...9.8 Critical
- accusoft imagegearAn exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d...9.8 Critical
- accusoft imagegearAn exploitable code execution vulnerability exists in the TIFF fillinraster function of the...9.8 Critical
- hcltech hcl nomad"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms...5.3 Medium
- Show moreLoading…