CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- [unknown] dpdk, canonical ubuntu linux, dpdk data plane development kit +4 more +6 moreA vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer...5.1 Medium
- prboom-plus project prboom-plusAn issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and...7.5 High
- cherokee-project cherokeeAn XSS issue was discovered in handler_server_info.c in Cherokee through 1.2.104. The requested...8.4 High
- cherokee-project cherokeeIn Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker...7.5 High
- cherokee-project cherokeeIn Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in...9.8 Critical
- readdle documentsAn issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file...5.3 Medium
- readdle documentsAn issue was discovered in the Readdle Documents app before 6.9.7 for iOS. The application's file...6.1 Medium
- gwtupload project gwtuploadAn issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for...7.5 High
- ibm iIBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of...2.9 Low
- brainstormforce ultimate addons for elementorAn issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress...7.2 High
- elementor page builderAn issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in...9.9 Critical
- rcos submittySubmitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid...6.1 Medium
- mikrotik-router-monitoring-system project mikrotik-router-monitoring-systemAn issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection...9.8 Critical
- naviserver project naviserverNaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode...7.5 High
- kerberos project kerberosDLL Injection in kerberos7.8 High
- seta morita shogi 64Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute...9.8 Critical
- keycloak, redhat openstack +1 moreImproper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Keycloak5.3 Medium
- ispyconnect agent dvriSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.5.3 Medium
- logkitty project logkittyArbitrary shell command execution in logkitty9.8 Critical
json-cUbuntujson-c regressionNo score- numfocus pandaspandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed...9.8 Critical
- scikit-learnscikit-learn Deserialization of Untrusted Data9.8 Critical
- yawsyaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by...5.5 Medium
- misp misp-maltegoMaltego incorrectly shares a MISP connection across users in a remote-transform use case9.8 Critical
- sun-denshi universal forensic extraction device firmwareCellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be...7.8 High
- vandyke securecrtSecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow...9.8 Critical
- dlink dap-1360 revision f firmwareAn issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a...9.8 Critical
- intelliants subrionSubrion CMS Cross-Site Request Forgery (CSRF) vulnerability8.1 High
- intelliants subrionSubrion CMS XSS6.1 Medium
- debian linux, linux kernel, canonical ubuntu linux +22 more +24 moreThe VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled...5.3 Medium
- redhat interchangeXSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0...6.1 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement update2.2 Low
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement update2.2 Low
- eq-3 ccu3 firmware, homematic ccu2 firmware +1 moreeQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote...9.8 Critical
- freerdp, canonical ubuntu linux, opensuse leap +2 moreUpdated freerdp/remmina packages fix security vulnerability6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security update6.6 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 moreModerate: freerdp and vinagre security, bug fix, and enhancement update6.5 Medium
- freerdp, canonical ubuntu linux, debian linux +1 more +3 morefreerdp - security update6.6 Medium
- transmissionbt transmission, debian linux, fedoraproject fedora +2 moreUse-after-free in libtransmission/variant.c in Transmission before 3.00 allows remote attackers...7.8 High
suricataMageiaUpdated suricata packages fix security issuesNo score- alsong estsoft, altools alsong +1 moreEstsoft ALSong DOM-Based XSS Vulnerability4.4 Medium
- huawei p20, p20 firmware +1 moreHuawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper...2.4 Low
- huawei honor 20 firmware, honor 20 pro firmware, honor magic2 firmware +1 more +3 moreHuawei smartphones Honor View 20;Honor 20;Honor 20 PRO;Honor Magic2 with Versions earlier than 10...7.1 High
- red hat ansible, redhat ansible tower +1 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible5.0 Medium
json-cUbuntujson-c regressionNo score- bitdefender enginesIncomplete validation in detection code in Bitdefender Engines (VA-8589)9.0 Critical
- rcos submittySubmitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack...5.4 Medium
- opto22 softpac projectOpto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any...9.8 Critical
- opto22 softpac projectOpto 22 SoftPAC Project Version 9.6 and prior. SoftPAC does not specify the path of multiple...8.8 High
- opto22 softpac projectOpto 22 SoftPAC Project Version 9.6 and prior. SoftPACAgent communicates with SoftPACMonitor over...9.1 Critical
- Show moreLoading…