CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm sterling file gatewayIBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could...6.5 Medium
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code...7.8 High
- zohocorp manageengine servicedesk plusDefault installations of Zoho ManageEngine ServiceDesk Plus 10.0 before 10500 are vulnerable to...6.1 Medium
- linux kernelA flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw...5.5 Medium
- alberta abtracetogether, health covidsafe, tracetogether +1 more +3 moreThe COVIDSafe (Australia) app 1.0 and 1.1 for iOS allows a remote attacker to crash the app, and consequently interfere with COVID-19 contact tracing, via a Bluetooth advertisement containing manufact…6.5 Medium
- six apart ltd. movable typeMovable Type series (Movable Type 7 r.4606 (7.2.1) and earlier (Movable Type 7), Movable Type...8.8 High
- six apart ltd. movable typeCross-site request forgery (CSRF) vulnerability in Movable Type series (Movable Type 7 r.4606 (7...8.8 High
- six apart ltd. movable typeCross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1) and...6.1 Medium
- six apart ltd. movable typeHTML attribute value injection vulnerability in Movable Type series (Movable Type 7 r.4606 (7.2.1...5.3 Medium
- typo3, typo3 cms +1 moreCross-Site Request Forgery in TYPO3 CMS8.0 High
- typo3, typo3 cms +1 moreDeserialization of Untrusted Data in TYPO3 CMS8.8 High
- pivotal concourseConcourse Open Redirect in the /sky/login endpoint7.6 High
- typo3, typo3 cms +1 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in TYPO3 CMS8.7 High
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMS5.4 Medium
- typo3, typo3 cms +1 moreCross-Site Scripting in TYPO3 CMS5.4 Medium
- typo3, typo3 cms +1 moreObservable Response Discrepancy in TYPO3 CMS3.7 Low
- palo alto networks pan-osPAN-OS: Panorama authentication bypass vulnerability9.0 Critical
- palo alto networks pan-osPAN-OS: DOM-Based cross site scripting vulnerability in management web interface8.8 High
- palo alto networks pan-osPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalation7.0 High
- palo alto networks pan-osPAN-OS: Buffer overflow in the management server8.8 High
- palo alto networks pan-osPAN-OS: OS injection vulnerability in PAN-OS management server8.8 High
- palo alto networks pan-osPAN-OS: Panorama context switch session cookie disclosure8.3 High
- palo alto networks pan-osPAN-OS: Panorama: XML external entity reference ('XXE') vulnerability leads the to information leak7.5 High
- palo alto networks pan-osPAN-OS: Panorama registration denial of service7.5 High
- palo alto networks pan-osPAN-OS: Authenticated user command injection vulnerability7.2 High
- palo alto networks pan-osPAN-OS: Panorama SD WAN arbitrary file creation7.2 High
- palo alto networks pan-osPAN-OS: OS command injection or arbitrary file deletion vulnerability7.2 High
- palo alto networks pan-osPAN-OS: OS command injection in management server7.2 High
- palo alto networks pan-osPAN-OS: Buffer overflow in management server payload parser7.2 High
- palo alto networks pan-osPAN-OS: GlobalProtect Clientless VPN session hijacking7.1 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs6.8 Medium
- palo alto networks pan-osPAN-OS: Authenticated administrator can delete arbitrary system file6.5 Medium
- palo alto networks pan-osPAN-OS: Spoofed Kerberos key distribution center authentication bypass8.1 High
- palo alto networks pan-osPAN-OS: Panorama External control of file vulnerability leads to privilege escalation8.1 High
- palo alto networks pan-osPAN-OS: Improper SAML SSO authorization of shared local users5.4 Medium
- palo alto networks pan-osPAN-OS: GlobalProtect registration open redirect5.3 Medium
- palo alto networks pan-osPAN-OS: Panorama management server log injection5.3 Medium
- palo alto networks pan-osPAN-OS: Management server rasmgr denial of service4.9 Medium
- palo alto networks pan-osPAN-OS: Predictable temporary file vulnerability4.1 Medium
- palo alto networks pan-osPAN-OS: GlobalProtect Portal PHP session fixation vulnerability3.7 Low
- autoswitch python virtualenv project python virtualenv, michaelaquilina zsh-autoswitch-virtualenv +1 moreRemote Code Execution in Autoswitch Python Virtualenv7.9 High
- Show moreLoading…