CVEs published May 7, 2020
77 CVEs were published on May 7, 2020: 5 critical, 10 high. 3 are now in CISA KEV.
- Published
- 77
- Critical
- 5
- High
- 10
- Medium
- 7
- Low
- 4
- Unrated
- 51
- Now in CISA KEV
- 3
- Fix available
- 17
Most affected products
- TCExam
- 9
- FreeRDP
- 7
- IBM Data Risk Manager
- 4
- Eaton Intelligent Power manager
- 2
- NGINX Controller
- 2
- 3S
- 1
- ATTO FibreBridge
- 1
- barrelstrength Sprout Forms · barrelstrength/sprout-base… +1
- 1
- BookStackApp BookStack · ssddanbrown/bookstack
- 1
- Canonical unity8
- 1
Critical 5
- CVE-2020-11050Improper Validation of Certificate with Host Mismatch in Java-WebSocketTooTallNate Java-WebSocket · org.java-websocket:Java-WebSoc…
- CVE-2020-4429IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account.IBM Data Risk Manager
- CVE-2020-4428IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the systemIBM Data Risk Manager
- CVE-2020-4427IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configIBM Data Risk Manager
- CVE-2020-6081An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.3S
High 10
- CVE-2020-12719XXE during an EventPublisher update can occur in Management Console in WSO2 API Manager 3.0.0 and earlier, API Manager Analytics 2.5.0 and e
- CVE-2020-10916This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 85TP-Link TL-WA855RE
- CVE-2015-7946MTP service exposed during emergency dialerCanonical unity8
- CVE-2020-11056Potential Code Injection in Sprout Formsbarrelstrength Sprout Forms · barrelstrength/sprout-base… +1
- CVE-2020-11053Open Redirect in OAuth2 ProxyOAuth2 Proxy · github.com/oauth2-proxy/oauth2-proxy
- CVE-2020-11052Improper Restriction of Excessive Authentication Attempts in SorcerySorcery
- CVE-2019-19164Dext5 Upload ActiveX Arbitrary File Execution VulnerabilityRAONWiz dext.ocx ActiveX Control in Dext5 Upload
- CVE-2020-7803Zoneplayer ActiveX File Download VulnerabilityIMGTech Co Zoneplayer
- CVE-2020-6651Command injection via specially crafted file name during config file uploadEaton Intelligent Power manager
- CVE-2020-6652Incorrect privilege assignment allowing non-admin users to upload config filesEaton Intelligent Power manager
Medium, low and unrated 62
- CVE-2020-12720vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.
- CVE-2020-12718In administration/comments.php in PHP-Fusion 9.03.50, an authenticated attacker can take advantage of a stored XSS vulnerability in the Prev
- CVE-2014-1423Online Accounts Signon daemon gives out all oauth tokens to any appUbuntu signon
- CVE-2020-11055Cross-site Scripting in BookStackBookStackApp BookStack · ssddanbrown/bookstack
- CVE-2020-10176ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands.
- CVE-2020-11054Incorrect Provision of Specified Functionality in qutebrowserqutebrowser
- CVE-2020-10795Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend.
- CVE-2020-10794Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database.
- CVE-2020-9475The S.
- CVE-2020-9474The S.
- CVE-2020-4430IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system.IBM Data Risk Manager
- CVE-2020-12116Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary
- CVE-2020-12703UliCMS before 2020.2 has XSS during PackageController uninstall.
- CVE-2020-12704UliCMS before 2020.2 has PageController stored XSS.
- CVE-2020-12705Multiple cross-site scripting (XSS) vulnerabilities exist in LeptonCMS before 4.6.0.
- CVE-2020-12706Multiple Cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the go
- CVE-2020-12707An XSS vulnerability exists in modules/wysiwyg/save.php of LeptonCMS 4.5.0.
- CVE-2020-12708Multiple cross-site scripting vulnerabilities in PHP-Fusion 9.03.50 allow remote attackers to inject arbitrary web script or HTML via the ca
- CVE-2020-10971An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution o
- CVE-2020-10972An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page.
- CVE-2020-10973An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh w
- CVE-2020-10974An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext
- CVE-2020-7805An issue was discovered on KT Slim egg IML500 (R7283, R8112, R8424) and IML520 (R8112, R8368, R8411) wifi device.Infomark KT Slim egg IML500 · Infomark KT Slim egg IML520
- CVE-2020-12679A reflected cross-site scripting (XSS) vulnerability in the Mitel ShoreTel Conference Web Application 19.50.1000.0 before MiVoice Connect 18
- CVE-2020-7646curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input.curlrequest
- CVE-2020-12608An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent.
- CVE-2020-12448GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet.
- CVE-2020-5750Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS)TCExam
- CVE-2020-5749Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) aTCExam
- CVE-2020-5751Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) aTCExam
- CVE-2020-5748Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS)TCExam
- CVE-2020-5745Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users iTCExam
- CVE-2020-11431The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated at
- CVE-2020-5746Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) aTCExam
- CVE-2020-5743Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they donTCExam
- CVE-2020-5744Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.TCExam
- CVE-2020-5747Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) aTCExam
- CVE-2020-12683Katyshop2 before 2.12 has multiple stored XSS issues.
- CVE-2020-12687An issue was discovered in Serpico before 1.3.3.
- CVE-2020-8983An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most rec
- CVE-2020-8982An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, includi
- CVE-2020-7473In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releas
- CVE-2019-18869Leftover Debug Code in Blaauw Remote Kiln Control through v3.00r4 allows a user to execute arbitrary php code via /default.php?idx=17.
- CVE-2019-18871A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upl
- CVE-2019-18870A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to do
- CVE-2019-18872Weak password requirements in Blaauw Remote Kiln Control through v3.00r4 allow a user to set short or guessable passwords (e.g., 1 or 1234).
- CVE-2019-18866Unauthenticated SQL injection via the username in the login mechanism in Blaauw Remote Kiln Control through v3.00r4 allows a user to extract
- CVE-2019-18864/server-info and /server-status in Blaauw Remote Kiln Control through v3.00r4 allow an unauthenticated attacker to gain sensitive informatio
- CVE-2019-18867Browsable directories in Blaauw Remote Kiln Control through v3.00r4 allow an attacker to enumerate sensitive filenames and locations, includ
- CVE-2019-18868Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to access MySQL credentials in cleartext in /engine/db.inc, /l
- CVE-2019-18865Information disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an u
- CVE-2018-5493ATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which allows an unauthenticated remote attacker toATTO FibreBridge
- CVE-2020-5895On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or uNGINX Controller
- CVE-2020-5894On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.NGINX Controller
- CVE-2020-12696The iframe plugin before 4.5 for WordPress does not sanitize a URL.
- CVE-2020-11042Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11044Double Free in FreeRDPFreeRDP
- CVE-2020-11045Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11046Improper Restriction of Operations within the Bounds of a Memory Buffer in FreeRDPFreeRDP
- CVE-2020-11047Out-of-bounds Read in FreeRDPFreeRDP
- CVE-2020-11048Out-of-bounds Read in FreeRDPrdp_read_flow_control_pduFreeRDP
- CVE-2020-11049Out-of-bounds Read in FreeRDPrdp_read_share_control_headerFreeRDP