CVEs published in May 2020
1,061 vulnerabilities, 140 critical, 11 exploited.
- node-dns-sync project node-dns-synccommand injection fix in node-dns-sync8.6 High
- netgear r6120 firmware, r6220 firmware, r6350 firmware +11 more +13 moreCertain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1...5.9 Medium
- lenovo printer lj4010dn, lj4010dn firmware, lj6700dn firmware +1 more +3 moreA denial of service vulnerability was reported in the firmware prior to version 1.01 used in...5.3 Medium
- lenovo printer lj4010dn, lj4010dn firmware, lj6700dn firmware +1 more +3 moreA denial of service vulnerability was reported in the firmware prior to version 1.01 used in...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain...2.7 Low
- ibm jazz reporting serviceIBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive...6.5 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity...7.1 High
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have...5.9 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain...3.7 Low
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate...5.3 Medium
- ibm security identity governance and intelligenceIBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to...4.3 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted...3.2 Low
- jerryscriptparser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory...7.5 High
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreIn QEMU 4.2.0, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...3.9 Low
- kaoni ezhttptransKaoni ezHTTPTrans Active-X File Download and Execution Vulnerability7.8 High
- vim, apple mac os x, canonical ubuntu linux +4 more +6 moreIn Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS...5.3 Medium
- vivotek cc8160\(hs\) firmware, cc8160 firmware, cc8370-hv firmware +197 more +199 moreVIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2)...8.8 High
- vivotek cc8160\(hs\) firmware, cc8160 firmware, cc8370-hv firmware +191 more +193 moretestserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and...6.5 Medium
- internment project internmentUse after free in internment8.1 High
- gnome balsa, glib-networking, broadcom fabric operating system +3 more +5 moreIn GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips...6.5 Medium
- siteorigin page builderAn issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The...8.8 High
- siteorigin page builderAn issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The...8.8 High
- pickplugins accordionAn issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX...5.4 Medium
- infolific real-time find and replaceAn issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The...8.8 High
- trend micro interscan web security virtual appliance, trend micro, inc. micro interscan web security virtual appliance +1 moreA vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote...9.8 Critical
- trend micro interscan web security virtual appliance, trend micro, inc. micro interscan web security virtual appliance +1 moreA vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote...8.8 High
- trend micro interscan web security virtual appliance, trend micro, inc. micro interscan web security virtual appliance +1 moreA vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote...7.5 High
- trend micro interscan web security virtual appliance, trend micro, inc. micro interscan web security virtual appliance +1 moreA cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual...6.1 Medium
- anchore engine, anchore-engine +1 moreShell Escape in Anchore Engine7.7 High
- aegir project aegirExposure of Sensitive Information to an Unauthorized Actor in AEgir9.6 Critical
- sympa, canonical ubuntu linux, debian linux +1 more +3 moreSympa before 6.2.56 allows privilege escalation.7.8 High
- bosch recording station, recording station firmware +1 moreKiosk Mode Breakout in Bosch Recording Station9.3 Critical
- phpmailer project phpmailer, canonical ubuntu linux, debian linux +1 more +3 moreInsufficient output escaping of attachment names in PHPMailer7.5 High
drupal/prlpPackagistThis module enables you to force a password update when using password reset link. The module doesn't sufficiently validate the login URL allowing a malicious user to use a specially crafted URL to lo…No scoredrupal/commercePackagistDrupal Commerce is used to build eCommerce websites and applications. It's possible to configure commerce to permit orders by anonymous users. In this configuration, customers who do not choose to cre…No score- centreon host-monitoring widget, service-monitoring widget, tactical-overview widget +2 moreCross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script...6.1 Medium
- centreon host-monitoring widget, service-monitoring widget, tactical-overview widget +2 moreCross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script...6.1 Medium
- centreon host-monitoring widget, service-monitoring widget, tactical-overview widget +2 moreCross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script...6.1 Medium
- centreon, centreon widget-host-monitoring +1 moreCentreon Sensitive Data Exposure vulnerability4.3 Medium
- fork-cms fork cmsFork CMS Cross-site Scripting Vulnerability6.1 Medium
- sqlite, apple icloud, ipados +19 more +21 moreext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the...7.0 High
- sqlite, apple icloud, ipados +18 more +20 moreSQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables...5.5 Medium
- sqlite, broadcom fabric operating system, canonical ubuntu linux +12 more +14 moreext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted...5.5 Medium
- qemu, canonical ubuntu linux, debian linux +2 moresd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of...5.5 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms...5.9 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform...4.9 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive...4.3 Medium
- Show moreLoading…