CVEs published May 26, 2020
26 CVEs were published on May 26, 2020: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 26
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- Mozilla Firefox ESR · Mozilla Firefox +1
- 5
- Mozilla Firefox
- 4
- AirMax AirOS for TI, XW and XM boards
- 3
- Debian netqmail
- 2
- Mozilla Firefox ESR · Mozilla Firefox
- 2
- bbpress/bbpress
- 1
- Johnson Controls Kantech EntraPass Security Management S… +1
- 1
- Mozilla Firefox for iOS
- 1
- Red Hat undertow · io.undertow:undertow-core
- 1
- The Linux Foundation kernel
- 1
High 1
Medium, low and unrated 25
- CVE-2020-13622JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object…
- CVE-2020-13623JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.
- CVE-2020-13614An issue was discovered in ssl.c in Axel before 2.17.8.
- CVE-2020-13615lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates.
- CVE-2020-13616The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.
- CVE-2020-6830For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions.Mozilla Firefox for iOS
- CVE-2020-6831A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12387A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12388The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2020-12389The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2020-12390Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks.Mozilla Firefox
- CVE-2020-12391Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context.Mozilla Firefox
- CVE-2020-12392The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by…Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12393The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the…Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12394A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different…Mozilla Firefox
- CVE-2020-12395Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12396Mozilla developers and community members reported memory safety bugs present in Firefox 75.Mozilla Firefox
- CVE-2020-8168We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…AirMax AirOS for TI, XW and XM boards
- CVE-2020-8171We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…AirMax AirOS for TI, XW and XM boards
- CVE-2020-8170We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax…AirMax AirOS for TI, XW and XM boards
- CVE-2020-10719A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes.Red Hat undertow · io.undertow:undertow-core
- CVE-2020-10751A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would…The Linux Foundation kernel
- CVE-2020-13487The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at…bbpress/bbpress
- CVE-2020-3811qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.Debian netqmail
- CVE-2020-3812qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability.Debian netqmail