# CVEs published 2020-05-16

5 CVEs were published on May 16, 2020: 1 critical, 0 high. Days are UTC.

- [CVE-2020-13121](https://cve.now/CVE-2020-13121.md): Submitty through 20.04.01 has an open redirect via authentication/login?old= during an invalid login attempt. (no CVSS)
- [CVE-2020-13118](https://cve.now/CVE-2020-13118.md): An issue was discovered in Mikrotik-Router-Monitoring-System through 2018-10-22. (no CVSS)
- [CVE-2020-13111](https://cve.now/CVE-2020-13111.md): NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a (no CVSS)
- [CVE-2020-13110](https://cve.now/CVE-2020-13110.md): The kerberos package before 1.0.0 for Node.js allows arbitrary code execution and privilege escalation via injection of malicious DLLs throu (no CVSS, kerberos)
- [CVE-2020-13109](https://cve.now/CVE-2020-13109.md): Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.