CVEs published May 1, 2020
5 CVEs were published on May 1, 2020: 0 critical, 1 high.
- Published
- 5
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Fonality Trixbox Community Edition
- 1
- HCL Connections
- 1
- org.dom4j:dom4j · dom4j:dom4j
- 1
High 1
Medium, low and unrated 4
- CVE-2020-10683dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks.org.dom4j:dom4j · dom4j:dom4j
- CVE-2019-4209HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attHCL Connections
- CVE-2020-12474Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Pun
- CVE-2020-12117Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted pa