# CVEs published 2020-05-09

14 CVEs were published on May 9, 2020: 0 critical, 1 high. Days are UTC.

- [CVE-2020-12767](https://cve.now/CVE-2020-12767.md): exif\_entry\_get\_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error. (no CVSS)
- [CVE-2020-12768](https://cve.now/CVE-2020-12768.md): An issue was discovered in the Linux kernel before 5.6. (no CVSS)
- [CVE-2020-12769](https://cve.now/CVE-2020-12769.md): An issue was discovered in the Linux kernel before 5.4.17. (no CVSS)
- [CVE-2020-12770](https://cve.now/CVE-2020-12770.md): An issue was discovered in the Linux kernel through 5.6.11. (no CVSS)
- [CVE-2020-12771](https://cve.now/CVE-2020-12771.md): An issue was discovered in the Linux kernel through 5.6.11. (no CVSS)
- [CVE-2019-20795](https://cve.now/CVE-2019-20795.md): iproute2 before 5.1.0 has a use-after-free in get\_netnsid\_from\_name in ip/ipnetns.c. (no CVSS)
- [CVE-2020-12764](https://cve.now/CVE-2020-12764.md): Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal. (no CVSS)
- [CVE-2020-12765](https://cve.now/CVE-2020-12765.md): Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal. (no CVSS)
- [CVE-2020-12766](https://cve.now/CVE-2020-12766.md): Gnuteca 3.8 allows action=main:search:simpleSearch SQL Injection via the exemplaryStatusId parameter. (no CVSS)
- [CVE-2019-20794](https://cve.now/CVE-2019-20794.md): An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. (no CVSS)
- [CVE-2020-12761](https://cve.now/CVE-2020-12761.md): modules/loaders/loader\_ico.c in imlib2 1.6.0 has an integer overflow (with resultant invalid memory allocations and out-of-bounds reads) via (no CVSS)
- [CVE-2020-12637](https://cve.now/CVE-2020-12637.md): Zulip Desktop before 5.2.0 has Missing SSL Certificate Validation because all validation was inadvertently disabled during an attempt to rec (no CVSS)
- [CVE-2020-12755](https://cve.now/CVE-2020-12755.md): fishProtocol::establishConnection in fish/fish.cpp in KDE kio-extras through 20.04.0 makes a cacheAuthentication call even if the user had n (no CVSS)
- [CVE-2020-12762](https://cve.now/CVE-2020-12762.md): json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf\_memappend. (CVSS 7.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.