CVEs published May 6, 2020
72 CVEs were published on May 6, 2020: 6 critical, 20 high. 1 is now in CISA KEV.
- Published
- 72
- Critical
- 6
- High
- 20
- Medium
- 25
- Low
- 1
- Unrated
- 20
- Now in CISA KEV
- 1
- Fix available
- 18
Most affected products
- Cisco Firepower Threat Defense Software
- 13
- Cisco Adaptive Security Appliance (ASA) Software
- 12
- Cisco Firepower Management Center
- 6
- Accusoft
- 4
- Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- 4
- keystone
- 4
- Jenkins project Jenkins Credentials Binding Plugin · org.je…
- 2
- RAONwiz Dext.ocx ActiveX Control in Dext5 Upload
- 2
- "HCL Nomad"
- 1
- Cisco Content Security Management Appliance
- 1
Critical 6
- CVE-2020-3187Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-8899Memory corruption in Quram library when decoding qmg can lead to RCESamsung Android OS
- CVE-2020-6075An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGearAccusoft
- CVE-2020-6076An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library.Accusoft
- CVE-2020-6082An exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d.dll library of Accusoft ImageGear 19.6.0.Accusoft
- CVE-2020-6094An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4Accusoft
High 20
- CVE-2020-3301Cisco Firepower Management Center Static Credential VulnerabilitiesCisco Firepower Management Center
- CVE-2020-3298Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Malformed OSPF Packets Processing Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3283Cisco Firepower 1000 Series SSL/TLS Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3259Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3255Cisco Firepower Threat Defense Software Packet Flood Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3254Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Media Gateway Control Protocol Denial of Service VulnerabilitiesCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3196Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3195Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software OSPF Packets Processing Memory Leak VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3191Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IPv6 DNS Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3189Cisco Firepower Threat Defense Software VPN System Logging Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3334Cisco Firepower 2100 Series Security Appliances ARP Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3318Cisco Firepower Management Center Static Credential VulnerabilitiesCisco Firepower Management Center
- CVE-2020-3125Cisco Adaptive Security Appliance Software Kerberos Authentication Bypass VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3179Cisco Firepower Threat Defense Software Generic Routing Encapsulation Tunnel IPv6 Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2019-19168Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote aRAONwiz Dext.ocx ActiveX Control in Dext5 Upload
- CVE-2019-19169Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by seRAONwiz Dext.ocx ActiveX Control in Dext5 Upload
- CVE-2020-7806Tobesoft Xplatform ActiveX File Download VulnerabilityTobesoft Xplatform
- CVE-2019-19167Tobesoft Nexacro14 ActiveX File Download VulnerabilityTobesoft Nexacro14
- CVE-2019-19166Tobesoft XPlatform Arbitrary File Execution VulnerabilityTobesoft XPlatform
- CVE-2020-10704A flaw was found when using samba as an Active Directory Domain Controller.Red Hat samba
Medium, low and unrated 46
- CVE-2020-12689An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.keystone
- CVE-2020-12690An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.keystone
- CVE-2020-12691An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.keystone
- CVE-2020-12692An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0.keystone
- CVE-2020-12669core/get_menudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphandolibarr/dolibarr
- CVE-2018-8956ntpd in ntp 4.2.8p10, 4.2.8p11, 4.2.8p12 and 4.2.8p13 allow remote attackers to prevent a broadcast client from synchronizing its clock with
- CVE-2020-11727A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote a
- CVE-2020-3308Cisco Firepower Threat Defense Software Signature Verification Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3307Cisco Firepower Management Center Arbitrary Log File Write VulnerabilityCisco Firepower Management Center
- CVE-2020-3306Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software DHCP Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3305Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software BGP Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3303Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv1 Denial of Service VulnerabilityCisco Adaptive Security Appliance (ASA) Software
- CVE-2020-3302Cisco Firepower Management Center File Overwrite VulnerabilityCisco Firepower Management Center
- CVE-2020-3285Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3256Cisco Hosted Collaboration Mediation Fulfillment XML External Expansion VulnerabilityCisco Hosted Collaboration Mediation Fulfillment
- CVE-2020-3253Cisco Firepower Threat Defense Software Shell Access VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3246Cisco Umbrella Carriage Return Line Feed Injection VulnerabilityCisco Umbrella
- CVE-2020-3188Cisco Firepower Threat Defense Software Management Interface Denial of Service VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3329Cisco IMC Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Role-Based Access Control VulnerabilityCisco UCS Director
- CVE-2020-3315Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3313Cisco Firepower Management Center Cross-Site Scripting VulnerabilityCisco Firepower Management Center
- CVE-2020-3312Cisco Firepower Threat Defense Software Information Disclosure VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3311Cisco Firepower Management Center Open Redirect VulnerabilityCisco Firepower Management Center
- CVE-2020-3310Cisco Firepower Device Manager On-Box Software XML Parsing VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3309Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-3178Cisco Content Security Management Appliance Open Redirect VulnerabilitiesCisco Content Security Management Appliance
- CVE-2020-3186Cisco Firepower Threat Defense Software Management Access List Bypass VulnerabilityCisco Firepower Threat Defense Software
- CVE-2020-7921Administrative action may disable enforcement of per-user IP whitelistingMongoDB Server
- CVE-2020-12108/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.
- CVE-2020-4446IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass seIBM Business Process Manager Standard · IBM Business Automa…
- CVE-2020-4421IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to spoof another users ideIBM WebSphere Application Server Liberty
- CVE-2020-4384IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting.IBM InfoSphere Information Server
- CVE-2019-4266IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaininIBM Maximo Anywhere
- CVE-2020-6861A flawed protocol design in the Ledger Monero app before 1.5.1 for Ledger Nano and Ledger S devices allows a local attacker to extract the m
- CVE-2020-10693A flaw was found in Hibernate Validator version 6.1.2.Final.hibernate-validator · org.hibernate.validator:hibernate-… +1
- CVE-2020-2189Jenkins SCM Filter Jervis Plugin 0.2.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulJenkins project Jenkins SCM Filter Jervis Plugin · io.jenki…
- CVE-2020-2187Jenkins Amazon EC2 Plugin 1.50.1 and earlier unconditionally accepts self-signed certificates and does not perform hostname validation, enabJenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- CVE-2020-2188A missing permission check in Jenkins Amazon EC2 Plugin 1.50.1 and earlier in form-related methods allowed users with Overall/Read access toJenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- CVE-2020-2185Jenkins Amazon EC2 Plugin 1.50.1 and earlier does not validate SSH host keys when connecting agents, enabling man-in-the-middle attacks.Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- CVE-2020-2186A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances.Jenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- CVE-2020-2182Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some Jenkins project Jenkins Credentials Binding Plugin · org.je…
- CVE-2020-2183Jenkins Copy Artifact Plugin 1.43.1 and earlier performs improper permission checks, allowing attackers to copy artifacts from jobs they havJenkins project Jenkins Copy Artifact Plugin · org.jenkins-…
- CVE-2020-2184A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to conJenkins project Jenkins CVS Plugin · org.jenkins-ci.plugins…
- CVE-2020-2181Jenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build conJenkins project Jenkins Credentials Binding Plugin · org.je…
- CVE-2020-4092"If port encryption is not enabled on the Domino Server, HCL Nomad on Android and iOS Platforms will communicate in clear text and does not "HCL Nomad"
- CVE-2020-12672GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c.