CVEs published May 25, 2020
7 CVEs were published on May 25, 2020: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- verbb/image-resizer
- 2
- verbb/knock-knock
- 2
- Cybozu Desktop for Windows
- 1
- em-http-request
- 1
Medium, low and unrated 7
- CVE-2020-13485The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.verbb/knock-knock
- CVE-2020-13486The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.verbb/knock-knock
- CVE-2020-13482EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack againstem-http-request
- CVE-2020-13458An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.verbb/image-resizer
- CVE-2020-13459An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.verbb/image-resizer
- CVE-2020-13442A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870.
- CVE-2020-5537Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.Cybozu Desktop for Windows