CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In May 2020 (CVSS score >= 4)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
51 CVE-2020-13241 434 2020-05-20 2020-05-22
7.2
 None Local Low Not required Complete Complete Complete
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.
52 CVE-2020-13240 276 XSS Bypass 2020-05-20 2021-07-21
5.5
 None Remote Low ??? Partial Partial None
The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS.
53 CVE-2020-13231 352 CSRF 2020-05-20 2020-06-05
4.3
 None Remote Medium Not required None Partial None
In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.
54 CVE-2020-13230 281 2020-05-20 2022-05-24
4.0
 None Remote Low ??? Partial None None
In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).
55 CVE-2020-13226 918 2020-05-20 2020-05-21
7.5
 None Remote Low Not required Partial Partial Partial
WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.
56 CVE-2020-13173 269 2020-05-28 2020-05-29
4.6
 None Local Low Not required Partial Partial Partial
Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which allows an attacker to intercept sensitive information or possibly elevate privileges via pre-installing an application which acquires that named pipe.
57 CVE-2020-13167 74 Exec Code 2020-05-19 2021-07-21
7.5
 None Remote Low Not required Partial Partial Partial
Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and allows injection of shell metacharacters.
58 CVE-2020-13166 798 Exec Code 2020-05-19 2022-04-26
7.5
 None Remote Low Not required Partial Partial Partial
The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used to send serialized ASP code.
59 CVE-2020-13164 400 2020-05-19 2021-07-21
5.0
 None Remote Low Not required None None Partial
In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a cycle in the directory graph on a filesystem.
60 CVE-2020-13163 295 2020-05-19 2021-03-04
5.8
 None Remote Medium Not required Partial Partial None
em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
61 CVE-2020-13154 522 2020-05-18 2021-07-21
4.0
 None Remote Low ??? Partial None None
Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet.
62 CVE-2020-13153 79 XSS 2020-05-18 2020-05-19
4.3
 None Remote Medium Not required None Partial None
app/View/Events/resolved_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view.
63 CVE-2020-13152 401 DoS 2020-05-20 2022-04-28
4.3
 None Remote Medium Not required None None Partial
A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time, eventually allows attackers to cause a denial of service.
64 CVE-2020-13149 276 +Priv 2020-05-18 2020-05-20
4.6
 None Local Low Not required Partial Partial Partial
Weak permissions on the "%PROGRAMDATA%\MSI\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming laptops, allows local authenticated users to overwrite system files and gain escalated privileges. One attack method is to change the Recommended App binary within App.json. Another attack method is to use this part of %PROGRAMDATA% for mounting an RPC Control directory.
65 CVE-2020-13146 74 2020-05-18 2021-07-21
6.8
 None Remote Medium Not required Partial Partial Partial
Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course>Instructor>Cohorts may contain a formula that is exported via the "Course>Data Downloads>Reports>Download profile info" feature.
66 CVE-2020-13144 94 Exec Code 2020-05-18 2022-04-26
6.5
 None Remote Low ??? Partial Partial Partial
Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New unit>Add new component>Problem button>Advanced tab>Custom Python evaluated code" screen, edit the problem, and execute Python code. This leads to arbitrary code execution.
67 CVE-2020-13143 125 2020-05-18 2021-01-04
4.3
 None Remote Medium Not required None None Partial
gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the possibility of an internal '\0' value, which allows attackers to trigger an out-of-bounds read, aka CID-15753588bcd4.
68 CVE-2020-13136 200 +Info 2020-05-18 2021-07-21
5.0
 None Remote Low Not required Partial None None
D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer.
69 CVE-2020-13129 200 +Info 2020-05-18 2021-08-12
9.0
 None Remote Low ??? Complete Complete Complete
An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. The GET method is used with client_key and device_id data in the query string, which allows attackers to obtain sensitive information by reading web-server logs.
70 CVE-2020-13128 434 DoS 2020-05-18 2020-05-19
5.0
 None Remote Low Not required None None Partial
An issue was discovered in Manolo GWTUpload 1.0.3. server/UploadServlet.java (the servlet for handling file upload) accepts a delay parameter that causes a thread to sleep. It can be abused to cause all of a server's threads to sleep, leading to denial of service.
71 CVE-2020-13126 434 Exec Code 2020-05-17 2020-05-18
6.5
 None Remote Low ??? Partial Partial Partial
An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13125. An attacker with the Subscriber role can upload arbitrary executable files to achieve remote code execution. NOTE: the free Elementor plugin is unaffected.
72 CVE-2020-13125 732 2020-05-17 2021-07-21
6.4
 None Remote Low Not required Partial Partial None
An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE-2020-13126. Unauthenticated attackers can create users with the Subscriber role even if registration is disabled.
73 CVE-2020-13121 601 2020-05-16 2020-05-18
5.8
 None Remote Medium Not required Partial Partial None
Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt.
74 CVE-2020-13118 89 Sql 2020-05-16 2020-05-19
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. SQL Injection exists in check_community.php via the parameter community.
75 CVE-2020-13114 770 2020-05-21 2022-04-27
5.0
 None Remote Low Not required None None Partial
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.
76 CVE-2020-13113 908 2020-05-21 2022-04-26
6.4
 None Remote Low Not required Partial None Partial
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.
77 CVE-2020-13112 125 2020-05-21 2020-07-27
6.4
 None Remote Low Not required Partial None Partial
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
78 CVE-2020-13111 119 DoS Overflow 2020-05-16 2021-07-21
5.0
 None Remote Low Not required None None Partial
NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a chunk. A remote attacker can craft a chunked-transfer request that will result in a negative value being passed to memmove via the size parameter, causing the process to crash.
79 CVE-2020-13110 427 Exec Code 2020-05-16 2020-05-20
6.9
 None Local Medium Not required Complete Complete Complete
The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs through use of the kerberos_sspi LoadLibrary() method, because of a DLL path search.
80 CVE-2020-13109 787 Exec Code Overflow 2020-05-16 2020-05-20
7.5
 None Remote Low Not required Partial Partial Partial
Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 (aka the IF subcommand to top-level command 7) has a stack-based buffer overflow.
81 CVE-2020-13093 22 Dir. Trav. 2020-05-15 2020-05-15
5.0
 None Remote Low Not required Partial None None
iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal.
82 CVE-2020-13092 502 Exec Code 2020-05-15 2020-05-19
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the joblib.load() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.
83 CVE-2020-13091 502 Exec Code 2020-05-15 2020-05-19
7.5
 None Remote Low Not required Partial Partial Partial
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties dispute this issue because the read_pickle() function is documented as unsafe and it is the user's responsibility to use the function in a secure manner.
84 CVE-2020-12889 2020-05-15 2020-05-19
7.5
 None Remote Low Not required Partial Partial Partial
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
85 CVE-2020-12888 755 2020-05-15 2020-11-02
4.7
 None Local Medium Not required None None Complete
The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space.
86 CVE-2020-12877 200 +Info 2020-05-14 2021-07-21
5.0
 None Remote Low Not required Partial None None
Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication.
87 CVE-2020-12876 200 +Info 2020-05-14 2021-07-21
5.0
 None Remote Low Not required Partial None None
Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server deployments.
88 CVE-2020-12875 863 2020-05-14 2020-05-15
6.5
 None Remote Low ??? Partial Partial Partial
Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application.
89 CVE-2020-12874 863 Bypass 2020-05-14 2021-07-21
7.5
 None Remote Low Not required Partial Partial Partial
Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to the server.
90 CVE-2020-12860 200 +Info 2020-05-18 2021-07-21
5.0
 None Remote Low Not required Partial None None
COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them. This allows for re-identification of a device, and potentially identification of the owner's name.
91 CVE-2020-12859 312 2020-05-18 2020-05-20
5.0
 None Remote Low Not required Partial None None
Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by observing cleartext payload data. This allows re-identification of devices, especially less common phone models or those in low-density situations.
92 CVE-2020-12858 665 2020-05-18 2021-07-21
5.0
 None Remote Low Not required Partial None None
Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Android devices running COVIDSafe by scanning for their advertising beacons.
93 CVE-2020-12857 200 +Info 2020-05-18 2021-07-21
5.0
 None Remote Low Not required Partial None None
Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android device running COVIDSafe.
94 CVE-2020-12856 2020-05-18 2020-05-20
7.5
 None Remote Low Not required Partial Partial Partial
OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote attackers to conduct long-term re-identification attacks and possibly have unspecified other impact, because of how Bluetooth is used.
95 CVE-2020-12835 74 Exec Code 2020-05-20 2021-07-21
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into the communication, resulting in remote code execution in the context of a client-side Network Licensing Protocol component.
96 CVE-2020-12834 276 Exec Code 2020-05-15 2020-05-21
7.5
 None Remote Low Not required Partial Partial Partial
eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the web interface, due to the default auto-login feature being enabled during first-time setup (or factory reset).
97 CVE-2020-12832 22 Dir. Trav. 2020-05-13 2020-05-21
7.5
 None Remote Low Not required Partial Partial Partial
WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input.
98 CVE-2020-12831 200 +Info 2020-05-13 2021-07-21
4.3
 None Remote Medium Not required Partial None None
** DISPUTED ** An issue was discovered in FRRouting FRR (aka Free Range Routing) through 7.3.1. When using the split-config feature, the init script creates an empty config file with world-readable default permissions, leading to a possible information leak via tools/frr.in and tools/frrcommon.sh.in. NOTE: some parties consider this user error, not a vulnerability, because the permissions are under the control of the user before any sensitive information is present in the file.
99 CVE-2020-12828 434 2020-05-21 2020-06-02
10.0
 None Remote Low Not required Complete Complete Complete
An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.
100 CVE-2020-12826 190 Overflow 2020-05-12 2020-06-22
4.4
 None Local Medium Not required Partial Partial Partial
A signal access-control issue was discovered in the Linux kernel before 5.6.5, aka CID-7395ea4e65c2. Because exec_id in include/linux/sched.h is only 32 bits, an integer overflow can interfere with a do_notify_parent protection mechanism. A child process can send an arbitrary signal to a parent process in a different security domain. Exploitation limitations include the amount of elapsed time before an integer overflow occurs, and the lack of scenarios where signals to a parent process present a substantial operational threat.
Total number of vulnerabilities : 866   Page : 1 2 (This Page)3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.