# CVEs published 2020-05-18

40 CVEs were published on May 18, 2020: 1 critical, 5 high. Days are UTC.

- [CVE-2019-17066](https://cve.now/CVE-2019-17066.md): In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. (no CVSS)
- [CVE-2020-13154](https://cve.now/CVE-2020-13154.md): Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via (no CVSS)
- [CVE-2020-1897](https://cve.now/CVE-2020-1897.md): A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error han (no CVSS, Facebook proxygen)
- [CVE-2020-13153](https://cve.now/CVE-2020-13153.md): app/View/Events/resolved\_attributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view. (no CVSS)
- [CVE-2020-13094](https://cve.now/CVE-2020-13094.md): Dolibarr before 11.0.4 allows XSS. (no CVSS, dolibarr/dolibarr)
- [CVE-2020-13149](https://cve.now/CVE-2020-13149.md): Weak permissions on the "%PROGRAMDATA%\\MSI\\Dragon Center" folder in Dragon Center before 2.6.2003.2401, shipped with Micro-Star MSI Gaming l (no CVSS)
- [CVE-2020-13145](https://cve.now/CVE-2020-13145.md): Studio in Open edX Ironwood 2.5 allows users to upload SVG files via the "Content\>File Uploads" screen. (no CVSS)
- [CVE-2020-13146](https://cve.now/CVE-2020-13146.md): Studio in Open edX Ironwood 2.5 allows CSV injection because an added cohort in Course\>Instructor\>Cohorts may contain a formula that is expo (no CVSS)
- [CVE-2020-13144](https://cve.now/CVE-2020-13144.md): Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course\>New section\>New subsection\>New uni (no CVSS)
- [CVE-2020-13143](https://cve.now/CVE-2020-13143.md): gadget\_dev\_desc\_UDC\_store in drivers/usb/gadget/configfs.c in the Linux kernel 3.16 through 5.6.13 relies on kstrdup without considering the (no CVSS)
- [CVE-2019-19456](https://cve.now/CVE-2019-19456.md): A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine \<= (no CVSS)
- [CVE-2019-19454](https://cve.now/CVE-2019-19454.md): An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine \<= 4.x.x. (no CVSS)
- [CVE-2020-6093](https://cve.now/CVE-2020-6093.md): An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. (CVSS 6.5, Nitro Pro)
- [CVE-2020-6092](https://cve.now/CVE-2020-6092.md): An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. (CVSS 8.8, Nitro Pro)
- [CVE-2020-6074](https://cve.now/CVE-2020-6074.md): An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. (CVSS 8.8, Nitro Pro)
- [CVE-2020-8034](https://cve.now/CVE-2020-8034.md): Gollem before 3.0.13, as used in Horde Groupware Webmail Edition 5.2.22 and other products, is affected by a reflected Cross-Site Scripting (no CVSS)
- [CVE-2020-13135](https://cve.now/CVE-2020-13135.md): D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy (no CVSS)
- [CVE-2020-13136](https://cve.now/CVE-2020-13136.md): D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer. (no CVSS)
- [CVE-2019-7246](https://cve.now/CVE-2019-7246.md): An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. (no CVSS)
- [CVE-2019-7247](https://cve.now/CVE-2019-7247.md): An issue was discovered in AODDriver2.sys in AMD OverDrive. (no CVSS)
- [CVE-2020-11549](https://cve.now/CVE-2020-11549.md): An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1 (CVSS 8.3)
- [CVE-2020-11550](https://cve.now/CVE-2020-11550.md): An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1 (CVSS 7.4)
- [CVE-2020-11551](https://cve.now/CVE-2020-11551.md): An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite (SRS60) AC3000 V2.5.1.106, Outdoor Satellite (RBS50Y) V2.5.1 (CVSS 9.6)
- [CVE-2020-8035](https://cve.now/CVE-2020-8035.md): The image view functionality in Horde Groupware Webmail Edition before 5.2.22 is affected by a stored Cross-Site Scripting (XSS) vulnerabili (no CVSS)
- [CVE-2020-12801](https://cve.now/CVE-2020-12801.md): Crash-recovered MSOffice encrypted documents defaulted to not to using encryption on next save (no CVSS, The Document Foundation LibreOffice)
- [CVE-2020-12255](https://cve.now/CVE-2020-12255.md): rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. (no CVSS)
- [CVE-2020-12256](https://cve.now/CVE-2020-12256.md): rConfig 3.9.4 is vulnerable to reflected XSS. (no CVSS)
- [CVE-2020-10967](https://cve.now/CVE-2020-10967.md): In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpar (CVSS 5.3)
- [CVE-2020-10958](https://cve.now/CVE-2020-10958.md): In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or l (CVSS 5.3)
- [CVE-2020-10957](https://cve.now/CVE-2020-10957.md): In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in (CVSS 7.5)
- [CVE-2020-12257](https://cve.now/CVE-2020-12257.md): rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because it lacks implementation of CSRF protection such as a CSRF token. (no CVSS)
- [CVE-2020-9524](https://cve.now/CVE-2020-9524.md): Cross Site scripting vulnerability on Micro Focus Enterprise Server and Enterprise developer, affecting all versions prior to version 5.0 Pa (no CVSS, Enterprise Server and Enterprise developer.)
- [CVE-2020-12258](https://cve.now/CVE-2020-12258.md): rConfig 3.9.4 is vulnerable to session fixation because session expiry and randomization are mishandled. (no CVSS)
- [CVE-2020-12259](https://cve.now/CVE-2020-12259.md): rConfig 3.9.4 is vulnerable to reflected XSS. (no CVSS)
- [CVE-2020-13129](https://cve.now/CVE-2020-13129.md): An issue was discovered in the stashcat app through 3.9.1 for macOS, Windows, Android, iOS, and possibly other platforms. (no CVSS)
- [CVE-2020-12860](https://cve.now/CVE-2020-12860.md): COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and C (no CVSS)
- [CVE-2020-12859](https://cve.now/CVE-2020-12859.md): Unnecessary fields in the OpenTrace/BlueTrace protocol in COVIDSafe through v1.0.17 allow a remote attacker to identify a device model by ob (no CVSS)
- [CVE-2020-12858](https://cve.now/CVE-2020-12858.md): Non-reinitialisation of random data in the advertising payload in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to re-identify Andr (no CVSS)
- [CVE-2020-12857](https://cve.now/CVE-2020-12857.md): Caching of GATT characteristic values (TempID) in COVIDSafe v1.0.15 and v1.0.16 allows a remote attacker to long-term re-identify an Android (no CVSS)
- [CVE-2020-12856](https://cve.now/CVE-2020-12856.md): OpenTrace, as used in COVIDSafe through v1.0.17, TraceTogether, ABTraceTogether, and other applications on iOS and Android, allows remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.