CVEs published May 19, 2020
36 CVEs were published on May 19, 2020: 0 critical, 6 high.
- Published
- 36
- Critical
- 0
- High
- 6
- Medium
- 10
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- [UNKNOWN] dpdk
- 3
- HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…
- 2
- IBM InfoSphere Information Server
- 2
- IBM Spectrum Scale
- 2
- ISC BIND9
- 2
- Kata Containers
- 2
- Bluetooth BR/EDR
- 1
- Bluetooth LE
- 1
- EDS Subsystem, FactoryTalk Linx software (Previously called…
- 1
- em-imap
- 1
High 6
- CVE-2020-2025Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image fileKata Containers
- CVE-2020-1695A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an impropeRed Hat resteasy · org.jboss.resteasy:resteasy-client
- CVE-2020-8617A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.cISC BIND9
- CVE-2020-8616BIND does not sufficiently limit the number of fetches performed when processing referralsISC BIND9
- CVE-2020-4411The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service vulnerabiliIBM Spectrum Scale
- CVE-2020-12667Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" iss
Medium, low and unrated 30
- CVE-2020-7138Potential remote code execution security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an HPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…
- CVE-2020-7139Potential remote access security vulnerabilities have been identified with HPE Nimble Storage systems that could be exploited by an attackerHPE Nimble Storage Hybrid Flash Arrays; Nimble Storage All…
- CVE-2020-7137A validation issue in HPE Superdome Flex's RMC component may allow local elevation of privilege.HPE Superdome Flex Server
- CVE-2020-12038Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6EDS Subsystem, FactoryTalk Linx software (Previously called…
- CVE-2020-13164In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash.
- CVE-2020-13163em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of em-imap
- CVE-2020-2024Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the hostKata Containers
- CVE-2020-13166The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all
- CVE-2020-13167Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) la
- CVE-2020-11766sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection.
- CVE-2020-10722A vulnerability was found in DPDK versions 18.05 and above.[UNKNOWN] dpdk
- CVE-2020-10723A memory corruption issue was found in DPDK versions 17.05 and above.[UNKNOWN] dpdk
- CVE-2020-10724A vulnerability was found in DPDK versions 18.11 and above.[UNKNOWN] dpdk
- CVE-2020-11715Panasonic P99 devices through 2020-04-10 have Incorrect Access Control.
- CVE-2020-10995PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks.
- CVE-2020-11807Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrar
- CVE-2020-10030An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0.
- CVE-2020-10134Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacksBluetooth LE
- CVE-2020-10135Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacksBluetooth BR/EDR
- CVE-2020-8021unauthorized read access to files where sourceaccess is disabled via a crafted _service file in Open Build ServiceopenSUSE Open Build Service
- CVE-2020-11845Cross Site Scripting vulnerability in Micro Focus Service Manager product.Service Manager.
- CVE-2020-12244An issue has been found in PowerDNS Recursor 4.1.0 through 4.3.0 where records in the answer section of a NXDOMAIN response lacking an SOA w
- CVE-2020-12662Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue.
- CVE-2020-12663Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
- CVE-2020-4412The Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.3 file system component is affected by a denial of service security vuIBM Spectrum Scale
- CVE-2020-4298IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting.IBM InfoSphere Information Server
- CVE-2020-4286IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute IBM InfoSphere Information Server
- CVE-2020-6956PCS DEXICON 3.4.1 allows XSS via the loginName parameter in login_action.jsp.
- CVE-2020-8434Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookie
- CVE-2020-7656jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method.jquery · jquery-rails +1