CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- symantec endpoint protection managerSymantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal...5.3 Medium
- symantec endpoint protection managerSymantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds...3.3 Low
- nystudio107 seomaticSEOmatic for CraftCMS allows Server-Side Template Injection7.5 High
- netapp aff a200 firmware, aff a220 firmware, aff a300 firmware +4 more +6 moreCertain versions of the NetApp Service Processor and Baseboard Management Controller firmware...7.5 High
- tobesoft xplatformA use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code...7.8 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information,...5.9 Medium
- apache log4net, fedoraproject fedora, netapp manageability software development kit +4 more +6 moreXML External Entity attack in log4net9.8 Critical
- opennms horizon, meridian +1 moreOpenNMS Horizon RCE via Unsafe Deserialization8.8 High
- cpanelcPanel before 86.0.14 allows attackers to obtain access to the current working directory via the...8.1 High
- cpanelcPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log...5.3 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software. A...7.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 7.2, 8.0, 8.1, 9, and 10 software....9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) software. The...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The S...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the...5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) (Exynos980 9630 and Exynos990 9830...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with O(8.X), P(9.0), and Q(10.0) (Exynos...9.8 Critical
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows a use-after-free.7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows out-of-bounds memory access.7.8 High
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 2 of 2).5.5 Medium
- libemf project libemf, fedoraproject fedora, opensuse leap +2 morelibEMF (aka ECMA-234 Metafile Library) through 1.0.11 allows denial of service (issue 1 of 2).5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with Q(10.0) software. Attackers can bypass the...7.5 High
- pi-holeThe Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary...8.8 High
- exim, canonical ubuntu linux, debian linux +1 more +3 moreExim through 4.93 has an out-of-bounds read in the SPA authenticator that could result in SPA...7.5 High
- keycloakKeycloak leaks sensitive information in logged exceptions5.0 Medium
- gazie project gazieAn issue was discovered in Gazie 7.32. A successful installation does not remove or block (or in...9.8 Critical
- rio project rioUse after free in rio9.8 Critical
- jal information technology co., ltd. pallet controlImproper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to...7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache Tomcat7.0 High
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Medium
- oracle iplanet web server** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x allows image injection...4.8 Medium
- oracle iplanet web server** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access...7.5 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreexif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreAn issue was discovered in the Linux kernel before 5.6. svm_cpu_uninit in arch/x86/kvm/svm.c has...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +20 more +22 moreAn issue was discovered in the Linux kernel through 5.6.11. sg_write lacks an sg_remove_request...6.7 Medium
- debian linux, linux kernel, canonical ubuntu linux +21 more +23 moreAn issue was discovered in the Linux kernel through 5.6.11. btree_gc_coalesce in drivers/md...5.5 Medium
- iproute2 project iproute2, canonical ubuntu linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreiproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.4.4 Medium
- solis gnutecaGnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.5.3 Medium
- solis mioloSolis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.5.3 Medium
- solis gnutecaGnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId...9.8 Critical
- linux kernelAn issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces...4.7 Medium
- enlightenment imlib2modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid...9.1 Critical
- zulipchat zulip desktopZulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to recognize the ignoreCerts option.9.8 Critical
- kde kio-extrasfishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a...3.3 Low
- json-c, canonical ubuntu linux, debian linux +17 more +19 morejson-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as...7.8 High
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreZoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate...9.8 Critical
- zohocorp manageengine datasecurity plus, manageengine adaudit plus +1 moreThe DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1...8.8 High
- Show moreLoading…