# CVEs published 2020-05-29

41 CVEs were published on May 29, 2020: 3 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-8482](https://cve.now/CVE-2020-8482.md): ABB Device Library Wizard Information Disclosure Vulnerability (CVSS 7.8, ABB Device Library Wizard)
- [CVE-2020-6937](https://cve.now/CVE-2020-6937.md): A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers… (no CVSS, MuleSoft Mule CE/EE)
- [CVE-2020-11844](https://cve.now/CVE-2020-11844.md): Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. (CVSS 10.0, Micro Focus Hybrid Cloud Management · Micro Focus ArcSig… +8)
- [CVE-2020-7650](https://cve.now/CVE-2020-7650.md): All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7654](https://cve.now/CVE-2020-7654.md): All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. (no CVSS, snyk-broker)
- [CVE-2020-7648](https://cve.now/CVE-2020-7648.md): All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7651](https://cve.now/CVE-2020-7651.md): All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7652](https://cve.now/CVE-2020-7652.md): All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7653](https://cve.now/CVE-2020-7653.md): All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-1831](https://cve.now/CVE-2020-1831.md): HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1833](https://cve.now/CVE-2020-1833.md): Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. (no CVSS, Huawei Honor)
- [CVE-2020-3959](https://cve.now/CVE-2020-3959.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware… (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3958](https://cve.now/CVE-2020-3958.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware… (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3957](https://cve.now/CVE-2020-3957.md): VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior)… (no CVSS, VMware Fusion · VMware Remote Console for Mac +1)
- [CVE-2020-1809](https://cve.now/CVE-2020-1809.md): HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1797](https://cve.now/CVE-2020-1797.md): HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1870](https://cve.now/CVE-2020-1870.md): There is a denial of service vulnerability in some Huawei products. (no CVSS, Huawei CloudEngine · Huawei NE40E +2)
- [CVE-2020-1832](https://cve.now/CVE-2020-1832.md): E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. (no CVSS, Huawei E6878-370)
- [CVE-2020-1798](https://cve.now/CVE-2020-1798.md): HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. (no CVSS, HUAWEI P30)
- [CVE-2020-8816](https://cve.now/CVE-2020-8816.md): Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. (CVSS 9.1, KEV)
- [CVE-2020-12493](https://cve.now/CVE-2020-12493.md): Critical Vulnerability in SWARCO CPU LS4000 (CVSS 10.0, SWARCO CPU LS4000)
- [CVE-2020-13634](https://cve.now/CVE-2020-13634.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial… (no CVSS)
- [CVE-2020-12675](https://cve.now/CVE-2020-12675.md): The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX… (no CVSS)
- [CVE-2020-4490](https://cve.now/CVE-2020-4490.md): IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass… (CVSS 5.3, IBM Business Process Manager Advanced · IBM Business Automa…)
- [CVE-2020-4352](https://cve.now/CVE-2020-4352.md): IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. (CVSS 4.9, IBM MQ for HPE NonStop)
- [CVE-2020-4306](https://cve.now/CVE-2020-4306.md): IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2020-5572](https://cve.now/CVE-2020-5572.md): Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via… (no CVSS, Cybozu Android App 'Mailwise for Android')
- [CVE-2020-5573](https://cve.now/CVE-2020-5573.md): Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via… (no CVSS, Cybozu Android App 'kintone mobile for Android')
- [CVE-2020-11017](https://cve.now/CVE-2020-11017.md): Double free in cliprdr\_server\_receive\_capabilities in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2020-11018](https://cve.now/CVE-2020-11018.md): Out of bound read in cliprdr\_server\_receive\_capabilities in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2020-11019](https://cve.now/CVE-2020-11019.md): Out of bound read in update\_recv in FreeRDP (CVSS 4.3, FreeRDP)
- [CVE-2020-11038](https://cve.now/CVE-2020-11038.md): Integer Overflow to Buffer Overflow in FreeRDP (CVSS 6.9, FreeRDP)
- [CVE-2020-11039](https://cve.now/CVE-2020-11039.md): Integer Overflow in FreeRDP (CVSS 8.0, FreeRDP)
- [CVE-2020-11040](https://cve.now/CVE-2020-11040.md): Out-of-bounds Read in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11041](https://cve.now/CVE-2020-11041.md): Improper Validation of Array Index in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11043](https://cve.now/CVE-2020-11043.md): Out-of-bounds Read in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11085](https://cve.now/CVE-2020-11085.md): Out-of-bounds Read in FreeRDP (CVSS 2.6, FreeRDP)
- [CVE-2020-11086](https://cve.now/CVE-2020-11086.md): Out-of-bounds Read in FreeRDP \`ntlm\_read\_ntlm\_v2\_response\` (CVSS 3.1, FreeRDP)
- [CVE-2020-11087](https://cve.now/CVE-2020-11087.md): Out-of-bounds Read in FreeRDP (CVSS 3.1, FreeRDP)
- [CVE-2020-11088](https://cve.now/CVE-2020-11088.md): Out-of-bound read in FreeRDP (CVSS 3.1, FreeRDP)
- [CVE-2020-11089](https://cve.now/CVE-2020-11089.md): Out-of-bound read in FreeRDP (CVSS 3.7, FreeRDP)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2020-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.