# CVEs published 2020-05-17

10 CVEs were published on May 17, 2020: 1 critical, 1 high. Days are UTC.

- [CVE-2019-20797](https://cve.now/CVE-2019-20797.md): An issue was discovered in e6y prboom-plus 2.5.1.5. (no CVSS)
- [CVE-2019-20798](https://cve.now/CVE-2019-20798.md): An XSS issue was discovered in handler\_server\_info.c in Cherokee through 1.2.104. (no CVSS)
- [CVE-2019-20799](https://cve.now/CVE-2019-20799.md): In Cherokee through 1.2.104, multiple memory corruption errors may be used by a remote attacker to destabilize the work of a server. (no CVSS)
- [CVE-2019-20800](https://cve.now/CVE-2019-20800.md): In Cherokee through 1.2.104, remote attackers can trigger an out-of-bounds write in cherokee\_handler\_cgi\_add\_env\_pair in handler\_cgi.c by se (no CVSS)
- [CVE-2019-20801](https://cve.now/CVE-2019-20801.md): An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. (no CVSS)
- [CVE-2019-20802](https://cve.now/CVE-2019-20802.md): An issue was discovered in the Readdle Documents app before 6.9.7 for iOS. (no CVSS)
- [CVE-2020-13128](https://cve.now/CVE-2020-13128.md): An issue was discovered in Manolo GWTUpload 1.0.3. (no CVSS)
- [CVE-2020-4345](https://cve.now/CVE-2020-4345.md): IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitiv (CVSS 2.9, IBM i)
- [CVE-2020-13125](https://cve.now/CVE-2020-13125.md): An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in the wild in May 2020 in c (CVSS 7.2)
- [CVE-2020-13126](https://cve.now/CVE-2020-13126.md): An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild in May 2020 in conjunction with CVE (CVSS 9.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.