CVEs published May 24, 2020
8 CVEs were published on May 24, 2020: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- sqlite
- 2
- github.com/grafana/grafana
- 1
Medium, low and unrated 8
- CVE-2020-13438ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
- CVE-2020-13440ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
- CVE-2020-13439ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
- CVE-2020-13434SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.sqlite
- CVE-2020-13435SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.sqlite
- CVE-2020-13433Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
- CVE-2020-13429legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) o
- CVE-2020-13430Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.github.com/grafana/grafana