CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- sap application server, sap se application server abap (st-pi) +1 moreService Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C,...9.9 Critical
- sap master data governanceSAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows...5.4 Medium
- sap se adaptive server enterprise (backup server), sap adaptive server enterprise backup server +1 moreSAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary...9.1 Critical
- sap businessobjects business intelligence platformUnder certain conditions or error scenarios SAP Business Objects Business Intelligence Platform,...5.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated...5.9 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access...6.5 Medium
- sap master data governance \(s4core\), master data governance \(s4fnd\), master data governance \(sap bs fnd\) +3 more +5 moreThe use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101,...7.7 High
- sap adaptive server enterprise, sap se adaptive server enterprise (xp server on windows platform) +1 moreUnder certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform),...8.0 High
- sap netweaver application server abap, sap se netweaver as abap (web dynpro abap) (sap basis), netweaver as abap (web dynpro abap) (sap ui) +2 moreSAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700,...5.3 Medium
- gnome libcrocolibcroco through 0.6.13 has excessive recursion in cr_parser_parse_any_core in cr-parser.c,...7.1 High
- red hat ansible, redhat ansible engine, ansible tower +1 more +3 moreExposure of Sensitive Information to an Unauthorized Actor in ansible5.0 Medium
- infradead openconnect, debian linux, fedoraproject fedora +1 more +3 moreOpenConnect 8.09 has a buffer overflow, causing a denial of service (application crash) or...9.8 Critical
- glpi-project glpiPublic GLPIKEY can be used to decrypt any data in GLPI7.2 High
- f5 big-ip access policy manager, big-ip access policy manager client +1 moreIn versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the...5.5 Medium
- f5 big-ip access policy manager, big-ip access policy manager client +1 moreOn versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder...7.8 High
- f5 big-ip access policy manager, big-ip access policy manager client +1 moreIn versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client...8.8 High
- apache nuttx, apache software foundation nuttx (incubating) +1 moreThe Apache NuttX (Incubating) project provides an optional separate "apps" repository which...9.8 Critical
- redhat openshift container platform, [unknown] openshift/openshift-apiserver +1 moreA flaw was found in OpenShift Container Platform where OAuth tokens are not encrypted when the...6.3 Medium
- libreswanAn out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27...7.5 High
- ibm api connectIBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which...5.3 Medium
- ibm api connectIBM API Connect V2018.4.1.0 through 2018.4.1.10 could allow a remote attacker to hijack the...5.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0, and 7.6.1 could allow an authenticated user to obtain highly...6.5 Medium
- debian linux, rubyonrails actionpack page-caching +1 moreArbitrary file write in actionpack-page_caching gem9.8 Critical
- rubyonrails active resource, fedoraproject fedora +1 moreInformation disclosure issue in Active Resource7.5 High
- fedoraproject fedora, nextcloud group folders +1 moreImproper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when...8.1 High
- hackerone nextcloud server, nextcloud server +1 moreAn outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross...5.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreAn Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker...7.7 High
- nextcloud mail, fedoraproject fedora +1 moreA missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.7.0 High
- debian linux, linux kernel, canonical ubuntu linux +8 more +10 moreCVE-2020-10711 does not affect BellSoft software5.9 Medium
- simpleledger slp-validateFalse-negative validation results in MINT transactions with invalid baton8.6 High
- simpleledger slpjsFalse-negative validation results in MINT transactions with invalid baton8.6 High
- canonical subiquitySubiquity server installer logged LUKS full disk encryption password2.3 Low
- freerdp, canonical ubuntu linux, debian linux +2 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDP2.2 Low
- zephyrproject zephyrInteger Overflow In is_in_region Allows User Thread To Access Kernel Memory7.5 High
- zephyrproject zephyrUpdateHub Might Dereference An Uninitialized Pointer8.0 High
- zephyrproject zephyrUpdateHub Module Explicitly Disables TLS Verification4.8 Medium
- zephyrproject zephyrMultiple Syscalls In kscan Subsystem Performs No Argument Validation7.8 High
- zephyrproject zephyrMultiple Syscalls In GPIO Subsystem Performs No Argument Validation7.8 High
- zephyrproject zephyrARC Platform Uses Signed Integer Comparison When Validating Syscall Numbers7.8 High
- zephyrproject zephyrARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers7.8 High
- zephyrproject zephyrShell Subsystem Contains a Buffer Overflow Vulnerability In shell_spaces_trim6.9 Medium
- zephyrproject zephyrUpdateHub Module Copies a Variable-Size Hash String Into a Fixed-Size Array9.0 Critical
- zephyrproject zephyrOut-of-bounds write in USB Mass Storage with unaligned sizes8.1 High
- zephyrproject zephyrBuffer Overflow in USB DFU requested length8.1 High
- keycloak, redhat openshift application runtimes, single sign-on +2 moreKeycloak Insufficient Session Expiry4.3 Medium
- swift swiftnio extras, apple nioextras +1 moreIn SwiftNIO Extras before 1.4.1, a logic issue was addressed with improved restrictions.7.5 High
- joobypath traversal in Jooby5.3 Medium
- symantec endpoint protectionSymantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a...7.8 High
- symantec endpoint protection managerSymantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote...7.0 High
- Show moreLoading…