CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- pango virtual private network software development kitAn issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain...9.8 Critical
- splashtop software updater, streamer +1 moreA Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16....6.6 Medium
- contentful python exampleCross-site scripting in Contentful6.1 Medium
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote...8.2 High
- libexif project libexif, canonical ubuntu linux, debian linux +1 more +3 moreAn issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote...9.1 Critical
- libexif project libexif, canonical ubuntu linux, opensuse leap +2 moreAn issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF...7.5 High
- [unknown] moodleMoodle vulnerable to RCE7.5 High
- johnson controls american dynamics victor video management system v5.2, software house c•cure 9000 v2.70, tyco victor video management system +1 more +3 moreC•CURE 9000 and victor Video Management System - Cleartext storage of user credentials upon installation or upgrade of software.9.9 Critical
- netapp element healthtools, element os +1 moreElement OS prior to version 12.0 and Element HealthTools prior to version 2020.04.01.04 are...7.5 High
- huawei anne-al00, berkeley-l09, cd16-10 +43 more +45 moreThere is an information leakage vulnerability in some Huawei products. An unauthenticated,...6.5 Medium
- hive netiusHTTP Request Smuggling in netius6.1 Medium
- huawei e6878-370, e6878-370 firmware +1 moreE6878-370 with versions of 10.0.3.1(H557SP27C233), 10.0.3.1(H563SP1C00), 10.0.3.1(H563SP1C233)...7.5 High
- druva insync clientRelative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in site information in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in URL formatting in Google Chrome prior to 83.0.4103.61 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in sharing in Google Chrome prior to 83.0.4103.61 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a...6.5 Medium
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreInappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed...7.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreIncorrect implementation in full screen in Google Chrome prior to 83.0.4103.61 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61...6.1 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreType confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in media in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had...9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in reader mode in Google Chrome on Android prior to 83.0.4103.61 allowed a remote...9.6 Critical
- google chrome, canonical ubuntu linux, debian linux +3 more +5 moreUse after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 High
- centreonCommand Injection in Centreon8.8 High
- unisys algol compilerUnisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit...8.8 High
- dell emc isilon onefs, isilon onefs +1 moreDell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre...5.3 Medium
- dell emc isilon onefs, isilon onefs +1 moreDell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2...5.3 Medium
- microweberMicroweber allows Unrestricted File Upload7.8 High
- fedoraproject fedora, mariadb connector\/c, opensuse leap +2 morelibmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the...8.8 High
- giteaDenial of Service in Gitea7.5 High
- httplib2, debian linux, fedoraproject fedora +2 moreCRLF injection in httplib26.8 Medium
drupal/corePackagistThe jQuery project released version 3.5.0, and as part of that, disclosed two security vulnerabilities that affect all prior versions. As mentioned in the jQuery blog, both are [...] security issues i…No score- Show moreLoading…