CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- opto22 softpac projectOpto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not...5.7 Medium
- codesys development system, control for beaglebone, control for empc-a\/imx6 +9 more +11 moreAn issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and...6.5 Medium
- opto22 softpac projectOpto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to...6.5 Medium
- google androidAirbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow...9.8 Critical
- google androidIn crus_afe_callback of msm-cirrus-playback.c, there is a possible out of bounds write due to a...6.7 Medium
- google androidIn onTransact of IHDCP.cpp, there is a possible out of bounds read due to incorrect error...5.5 Medium
- google androidAn improper authorization while processing the provisioning data.Product: AndroidVersions:...5.5 Medium
- google androidAn improper authorization in the receiver component of the Android Suite Daemon.Product:...5.5 Medium
- google androidAn improper authorization in the receiver component of Email.Product: AndroidVersions: Android...5.5 Medium
- google androidIn mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product:...5.5 Medium
- google android, canonical ubuntu linux, debian linux +2 more +4 moreIn exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a...5.0 Medium
- google androidIn getCellLocation of PhoneInterfaceManager.java, there is a possible permission bypass due to a...5.5 Medium
- google androidIn setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due...7.8 High
- google android, intel core i3-1000g1 firmware, core i3-1000g4 firmware +137 more +139 moreIn psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check....7.8 High
- google androidIn a2dp_aac_decoder_cleanup of a2dp_aac_decoder.cc, there is a possible invalid free due to...9.8 Critical
- google androidIn simulatePackageSuspendBroadcast of NotificationManagerService.java, there is a missing...7.8 High
- google androidIn various methods of PackageManagerService.java, there is a possible permission bypass due to a...7.8 High
- google androidIn startActivities of ActivityStartController.java, there is a possible escalation of privilege...7.8 High
- google androidIn setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of...5.0 Medium
- google androidIn BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to...5.5 Medium
- google androidIn onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due...5.5 Medium
- google androidIn navigateUpToLocked of ActivityStack.java, there is a possible permission bypass due to a...7.8 High
- google androidIn onKeyguardVisibilityChanged of key_store_service.cpp, there is a missing permission check....7.8 High
- google androidIn GattServer::SendResponse of gatt_server.cc, there is a possible out of bounds write due to an...7.8 High
- google androidIn onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification...7.8 High
- veritas aptareVeritas APTARE versions prior to 10.4 included code that bypassed the normal login process when...6.5 Medium
- veritas aptareVeritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An...6.3 Medium
- veritas aptareVeritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without...7.5 High
- veritas aptareVeritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on...5.3 Medium
- progress moveit automationAn issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint...6.1 Medium
- pivotal software spring security, spring security +1 moreDictionary attack with Spring Security queryable text encryptor6.5 Medium
- apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 moreApache ActiveMQ webconsole admin GUI is open to XSS6.1 Medium
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreDeserialization of Untrusted Data in Apache Camel RabbitMQ9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreApache Camel Netty enables Java deserialization by default9.8 Critical
- jetstream jetselectAn issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the...6.5 Medium
- apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 moreImproper Input Validation in Apache Camel7.5 High
- jetstream jetselectBond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding...9.8 Critical
- jetstream jetselectThe administrative passwords for all versions of Bond JetSelect are stored within an unprotected...6.5 Medium
- apache cloudstackA buffer overflow vulnerability has been found in the baremetal component of Apache CloudStack....9.8 Critical
- apache rocketmqDirectory traversal in Apache RocketMQ5.3 Medium
- apache flinkCommand injection in Apache Flink4.7 Medium
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache Ant6.3 Medium
- fazecast jserialcomm, schneider-electric ecostruxure it gateway +1 moreIn Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm websphere application serverIBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a...5.3 Medium
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive...4.3 Medium
- ibm i2 analysts notebookIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code...7.8 High
- Show moreLoading…