CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- blaauwproducts remote kiln controlBrowsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to...7.5 High
- blaauwproducts remote kiln controlBlaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL...9.8 Critical
- blaauwproducts remote kiln controlInformation disclosure via error message discrepancies in authentication functions in Blaauw...5.3 Medium
- atto fibrebridge 7500n firmware, netapp atto fibrebridge 7500n +1 moreATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which...7.5 High
- f5 nginx controllerOn NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions...7.8 High
- f5 nginx controllerOn versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side...8.1 High
- codesys runtimeAn exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart...9.9 Critical
array-macrocrates.io`array!` macro is unsound in presence of traits that implement methods it calls internallyNo score- bigint project bigintUnsoundness in bigint9.8 Critical
rmt-serverSUSESecurity update for rmt-serverNo score- mozilla firefox, firefox esr, thunderbird +2 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...7.8 High
- mozilla firefox, firefox esr +1 moreThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Critical
- mozilla firefox, firefox esr +1 moreThe Firefox content processes did not sufficiently lockdown access control which could result in...10.0 Critical
- iframe project iframeThe iframe plugin before 4.5 for WordPress does not sanitize a URL.6.1 Medium
- apple ios, iphone os +1 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- mozilla thunderbird, canonical ubuntu linux +1 moreBy encoding Unicode whitespace characters within the From email header, an attacker can spoof the...4.3 Medium
- mozilla firefoxMozilla developers and community members reported memory safety bugs present in Firefox 75. Some...9.8 Critical
- mozilla firefoxA logic flaw in our location bar implementation could have allowed a local attacker to spoof the...3.3 Low
- mozilla firefoxDocuments formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating...7.5 High
- mozilla firefoxIncorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security...9.8 Critical
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_share_control_header5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDPrdp_read_flow_control_pdu2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDP5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP5.5 Medium
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDP2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreDouble Free in FreeRDP2.2 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreOut-of-bounds Read in FreeRDP5.5 Medium
- dolibarrIncorrect Authorization in Dolibarr8.8 High
- ntpntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a...5.3 Medium
- algolplus advanced order export for woocommerceA cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce...6.1 Medium
drupal/webformPackagistThis module enables you to build forms and surveys in Drupal. The Webform Node sub-module allows these forms to be associated with a Drupal node. The Webform Node module does not implement access chec…No scoredrupal/webformPackagistThis webform module enables you to build 'Term select' and 'Term checkboxes' elements. The module doesn't sufficiently check term 'view' access when rendering the 'Term select' and 'Term checkboxes' e…No scoredrupal/webformPackagistThis module enables you to build forms and surveys in Drupal. The module doesn't sufficiently sanitize Webform labels nor visibility conditions under the scenario of placing a block. When a webform bl…No scoredrupal/webformPackagistThis module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter user input under in the scenario when a webform is edited, namely the message related to character…No scoredrupal/webformPackagistThe Webform module allows site builders to create forms. The module doesn't sufficiently prevent malicious code from being render via an options elements (i.e select menu, checkboxes, radios, etc...)…No score- cisco firepower threat defense software, secure firewall management center, secure firewall threat defense +2 moreCisco Firepower Threat Defense Software Signature Verification Bypass Vulnerability4.9 Medium
drupal/webformPackagistThis module enables you to build forms and surveys in Drupal. The module doesn't sufficiently validate data submitted into Webform Signature element during webform submission creation. This allows a m…No scoredrupal/webformPackagistThis module enables you to build forms and surveys in Drupal. The module doesn't sufficiently filter webform element properties (attributes) under the scenario of editing a webform. Malicious user cou…No score- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Arbitrary Log File Write Vulnerability5.3 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service Vulnerability6.8 Medium
- cisco adaptive security appliance, adaptive security appliance software, adaptive security appliance (asa) software +1 more +3 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service Vulnerability6.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center File Overwrite Vulnerability6.8 Medium
- cisco firepower management center, secure firewall management center +1 moreCisco Firepower Management Center Static Credential Vulnerabilities8.1 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, secure firewall threat defense +2 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service Vulnerability8.6 High
- cisco firepower threat defense software, secure firewall threat defense +1 moreCisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability5.8 Medium
- cisco asa 5505 firmware, asa 5510 firmware, asa 5512-x firmware +11 more +13 moreCisco Firepower 1000 Series SSL/TLS Denial of Service Vulnerability8.6 High
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +2 more +4 moreCisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability7.5 High
- cisco hosted collaboration mediation fulfillmentCisco Hosted Collaboration Mediation Fulfillment XML External Expansion Vulnerability4.9 Medium
- cisco firepower threat defense software, asa 5505 firmware, asa 5510 firmware +11 more +13 moreCisco Firepower Threat Defense Software Packet Flood Denial of Service Vulnerability7.5 High
- Show moreLoading…