CVEs published May 22, 2020
32 CVEs were published on May 22, 2020: 2 critical, 4 high. 1 is now in CISA KEV.
- Published
- 32
- Critical
- 2
- High
- 4
- Medium
- 6
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 1
- Fix available
- 6
Most affected products
- Cisco AMP for Endpoints
- 3
- puma
- 2
- Apache Kylin · org.apache.kylin:kylin-core-common
- 1
- Cisco Prime Collaboration Provisioning
- 1
- Cisco Prime Network Registrar
- 1
- Cisco Unified Contact Center Express
- 1
- Epson
- 1
- jw-util
- 1
- Kaoni ezHTTPTrans
- 1
- meinheld
- 1
Critical 2
High 4
- CVE-2020-11076HTTP Smuggling via Transfer-Encoding Header in Pumapuma
- CVE-2020-1956Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, aApache Kylin · org.apache.kylin:kylin-core-common
- CVE-2020-7813Kaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityKaoni ezHTTPTrans
- CVE-2020-3272Cisco Prime Network Registrar DHCP Denial of Service VulnerabilityCisco Prime Network Registrar
Medium, low and unrated 26
- CVE-2020-13412An issue was discovered in Aviatrix Controller before 5.4.1204.
- CVE-2020-13413An issue was discovered in Aviatrix Controller before 5.4.1204.
- CVE-2020-13414An issue was discovered in Aviatrix Controller before 5.4.1204.
- CVE-2020-13415An issue was discovered in Aviatrix Controller through 5.1.
- CVE-2020-13416An issue was discovered in Aviatrix Controller before 5.4.1066.
- CVE-2020-13417An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.
- CVE-2020-12397By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird dispMozilla Thunderbird
- CVE-2020-13388An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python.jw-util
- CVE-2020-13389An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-13390An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-13391An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-13392An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-13393An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-13394An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V1
- CVE-2020-7658meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling.meinheld
- CVE-2020-11077HTTP Smuggling via Transfer-Encoding Header in Pumapuma
- CVE-2020-10711A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7.Red Hat Kernel
- CVE-2020-8789Composr 10.0.30 allows Persistent XSS via a Usergroup name under the Security configuration.
- CVE-2020-3184Cisco Prime Collaboration Provisioning Software SQL Injection VulnerabilityCisco Prime Collaboration Provisioning
- CVE-2020-3314Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service VulnerabilityCisco AMP for Endpoints
- CVE-2020-3343Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer VulnerabilityCisco AMP for Endpoints
- CVE-2020-3344Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer VulnerabilityCisco AMP for Endpoints
- CVE-2020-13384Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, fo
- CVE-2020-13396An issue was discovered in FreeRDP before 2.1.1.
- CVE-2020-13397An issue was discovered in FreeRDP before 2.1.1.
- CVE-2020-13398An issue was discovered in FreeRDP before 2.1.1.