CVEs published May 9, 2020
14 CVEs were published on May 9, 2020: 0 critical, 1 high.
- Published
- 14
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
High 1
Medium, low and unrated 13
- CVE-2020-12767exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.
- CVE-2020-12768An issue was discovered in the Linux kernel before 5.6.
- CVE-2020-12769An issue was discovered in the Linux kernel before 5.4.17.
- CVE-2020-12770An issue was discovered in the Linux kernel through 5.6.11.
- CVE-2020-12771An issue was discovered in the Linux kernel through 5.6.11.
- CVE-2019-20795iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.
- CVE-2020-12764Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal.
- CVE-2020-12765Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal.
- CVE-2020-12766Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter.
- CVE-2019-20794An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed.
- CVE-2020-12761modules/loaders/loader_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via
- CVE-2020-12637Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to rec
- CVE-2020-12755fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had n