CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- siedle sg 150-0 firmwareThe S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows local privilege escalation via...7.0 High
- sorceryImproper Restriction of Excessive Authentication Attempts in Sorcery8.3 High
- siedle sg 150-0 firmwareThe S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 allows remote code execution via the...8.8 High
- java-websocket project java-websocketImproper Validation of Certificate with Host Mismatch in Java-WebSocket9.0 Critical
- ibm data risk managerIBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote...4.3 Medium
- ibm data risk managerIBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password...10.0 Critical
- ibm data risk managerIBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote...9.1 Critical
- ibm data risk managerIBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker...9.0 Critical
- zohocorp manageengine opmanagerZoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an...7.5 High
- ulicmsUliCMS before 2020.2 has XSS during PackageController uninstall.6.1 Medium
- ulicmsUliCMS before 2020.2 has PageController stored XSS.6.1 Medium
- lepton-cms leptoncmsMultiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0.6.1 Medium
- php-fusionMultiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to...5.4 Medium
- lepton-cms lepton cmsAn XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0. This can be exploited...6.1 Medium
- php-fusionMultiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to...6.1 Medium
- raonwiz dext5, dext.ocx activex control in dext5 upload +1 moreDext5 Upload ActiveX Arbitrary File Execution Vulnerability7.8 High
- wavlink wl-wn530hg4 firmware, wl-wn575a3 firmware, wl-wn579g3 firmware +2 moreAn issue was discovered on Wavlink WL-WN579G3 M79X3.V5030.180719, WL-WN575A3 RPT75A3.V4300.180801...8.8 High
- wavlink wn530hg4 firmware, wn531g3 firmware, wn572hg3 firmware +2 moreAn issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. A page is exposed...7.5 High
- wavlink wn530hg4 firmware, wn531g3 firmware, wn533a8 firmware +1 more +3 moreAn issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices, affecting /cgi-bin...7.5 High
- imgtech zoneplayerZoneplayer ActiveX File Download Vulnerability7.8 High
- wavlink jetstream ac3000 firmware, jetstream erac3000 firmware, wl-wn575a3 firmware +10 more +12 moreAn issue was discovered on Wavlink WL-WN579G3 - M79X3.V5030.180719 and WL-WN575A3 - RPT75A3.V4300...7.5 High
- infomark kt slim egg iml500, iml500 firmware, iml520 firmware +1 more +3 moreAn issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368,...9.8 Critical
- mitel mivoice connect, shoretel conference web +1 moreA reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web...6.1 Medium
- curlrequest project curlrequestcurlrequest allows execution of arbitrary commands9.8 Critical
- solarwinds managed service provider patch management engineAn issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1...7.8 High
- gitlabGitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via...5.3 Medium
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to...6.1 Medium
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to...5.4 Medium
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to...5.4 Medium
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to...6.1 Medium
- tecnick tcexamCross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive...7.4 High
- inetsoftware clear reports, helpdesk, pdfc +2 moreThe documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4...9.1 Critical
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to...5.4 Medium
- tecnick tcexamImproper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker...4.3 Medium
- tecnick tcexamRelative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the...4.9 Medium
- tecnick tcexamInsufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to...5.4 Medium
- katyshop2 project katyshop2Katyshop2 before 2.12 has multiple stored XSS issues.5.4 Medium
- eaton intelligent power manager (ipm), intelligent power manager +1 moreCommand injection via specially crafted file name during config file upload8.8 High
- eaton intelligent power manager (ipm), intelligent power manager +1 moreIncorrect privilege assignment allowing non-admin users to upload config files7.8 High
- serpico project serpicoAn issue was discovered in Serpico before 1.3.3. The /admin/attacments_backup endpoint can be...6.5 Medium
- oneidentity syslog-ng, opensuse backports sle-15-sp1, leap 15.1 +6 more +8 moresyslog-ng: Local privilege escalation from new to root in %post7.7 High
- citrix sharefile storagezones controllerIn certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones)...7.5 High
- citrix sharefile storagezones controllerIn certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones)...7.5 High
- citrix sharefile storagezones controllerIn certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones)...7.5 High
- blaauwproducts remote kiln controlLeftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute...9.8 Critical
- blaauwproducts remote kiln controlA path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3...8.8 High
- blaauwproducts remote kiln controlA path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3...6.5 Medium
- blaauwproducts remote kiln controlWeak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set...7.5 High
- blaauwproducts remote kiln controlUnauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln...7.5 High
- blaauwproducts remote kiln control/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an...7.5 High
- Show moreLoading…