CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- apple ipados, iphone os, mac os x +1 more +3 moreSome Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo...6.5 Medium
- idangero chop sliderA blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The...9.8 Critical
- shopizerPotential remote code execution in Shopizer9.1 Critical
- pypa pipAn issue was discovered in pip (all versions) because it installs the version with the highest...7.8 High
- broadcom tcpreplay, fedoraproject fedora +1 moretcprewrite in Tcpreplay through 4.3.2 has a heap-based buffer over-read during a get_c operation....9.1 Critical
- maxum rumpusAn issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a...6.5 Medium
rpmlintopenSUSE,rpmlint-miniopenSUSE,rpmlint-testsopenSUSE +2 moreSecurity update for rpmlintNo score- linux kernel, redhat enterprise mrg +1 moreThe fix for CVE-2019-11599, affecting the Linux kernel before 5.0.10 was not complete. A local...7.0 High
- linux kernel, canonical ubuntu linux, debian linux +19 more +21 moreThere is a use-after-free in kernel versions before 5.5 due to a race condition between the...6.5 Medium
- [unknown] keycloakPrivilege Defined With Unsafe Actions in Keycloak6.6 Medium
- [unknown] keycloakKeycloak code execution via UMA policy abuse6.6 Medium
- techsmith snagitIn TechSmith SnagIt before 20.1.1, an XML External Entity (XXE) injection issue exists that would...5.5 Medium
- mcafee active response, mcafee,llc mcafee active response (mar) for linux +1 morePrivilege Escalation vulnerability in MAR for Linux7.8 High
- mcafee active response, mcafee,llc mcafee active response (mar) for mac +1 morePrivilege Escalation vulnerability MAR for Mac7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for linux, mcafee endpoint detection and response +1 morePrivilege Escalation vulnerability in EDR for Linux7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for mac, mcafee endpoint detection and response +1 morePrivilege Escalation vulnerability in EDR for Mac7.8 High
- mcafee active response, mcafee,llc mcafee active response (mar) for windows +1 morePrivilege Escalation vulnerability in MAR for Windows7.8 High
- mcafee mvision endpoint, mcafee,llc mcafee mvision endpoint +1 morePrivilege Escalation vulnerability in MVISION Endpoint7.8 High
- mcafee,llc mcafee exploit detection and response (edr) for windows, mcafee endpoint detection and response +1 morePrivilege Escalation vulnerability in EDR for Windows7.8 High
- mcafee virusscan enterprise, mcafee,llc mcafee virusscan enterprise (vse) for linux +1 morePrivilege Escalation vulnerability through symbolic links in VSEL8.8 High
- plex media serverDeserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated...7.2 High
- avira free antivirus** DISPUTED ** Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user...5.5 Medium
- mcafee virusscan enterprise, mcafee,llc mcafee virusscan enterprise (vse) for windows +1 morePrivilege Escalation vulnerability through symbolic links in VSE for Windows8.8 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability...7.5 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer...9.8 Critical
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for mac +1 morePrivilege Escalation vulnerability through symbolic links in ENSM8.8 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple heap-based buffer...9.8 Critical
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path...8.8 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Input is not properly sanitized...7.5 High
- mcafee endpoint security, mcafee,llc mcafee endpoint security (ens) for windows +1 morePrivilege Escalation vulnerability through symbolic links in ENS for Windows8.8 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path...9.8 Critical
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path...7.1 High
- advantech webaccessAdvantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An improper validation...9.8 Critical
- google chrome, debian linux, opensuse leap +2 moreType confusion in Blink in Google Chrome prior to 81.0.4044.138 allowed a remote attacker to...8.8 High
- domainmodreset.php in DomainMOD 4.13.0 uses insufficient entropy for password reset requests, leading to...9.8 Critical
- nvidia display driver, graphics drivers +1 moreKernel heap contents leak race in ioctl handler5.0 Medium
- nvidia display driver, graphics drivers +1 moreHeap overflow in control device ioctl5.0 Medium
- vbulletinvBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access...9.8 Critical
- wso2 api manager, api manager analytics, api microgateway +4 more +6 moreXXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and...8.7 High
- php-fusionIn administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take...5.4 Medium
- signond project signond, ubports ubuntu touch, ubuntu signon +2 moreOnline Accounts Signon daemon gives out all oauth tokens to any app5.9 Medium
- tp-link tl-wa855re, tl-wa855re firmware +1 moreThis vulnerability allows network-adjacent attackers to escalate privileges on affected...8.0 High
- ubports unity8, canonical unity8 (ubuntu) +1 moreMTP service exposed during emergency dialer7.3 High
- barrelstrength sprout formsPotential Code Injection in Sprout Forms7.4 High
- bookstackapp bookstackCross-site Scripting in BookStack6.3 Medium
- assaabloy yale wipc-301w firmwareASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands.9.8 Critical
- qutebrowser, fedoraproject fedora +1 moreIncorrect Provision of Specified Functionality in qutebrowser3.5 Low
- gira tks-ip-gateway firmwareGira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup...7.2 High
- gira tks-ip-gateway firmwareGira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an...9.8 Critical
- oauth2 proxy proxy, pusher oauth2 proxy +1 moreOpen Redirect in OAuth2 Proxy7.1 High
- Show moreLoading…