CVEs published May 26, 2020
26 CVEs were published on May 26, 2020: 0 critical, 1 high.
- Published
- 26
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 13
Most affected products
- Mozilla Firefox ESR · Mozilla Firefox +1
- 5
- Mozilla Firefox
- 4
- AirMax AirOS for TI, XW and XM boards
- 3
- Debian netqmail
- 2
- Mozilla Firefox ESR · Mozilla Firefox
- 2
- bbpress/bbpress
- 1
- Johnson Controls Kantech EntraPass Security Management S… +1
- 1
- Mozilla Firefox for iOS
- 1
- Red Hat undertow · io.undertow:undertow-core
- 1
- The Linux Foundation kernel
- 1
High 1
Medium, low and unrated 25
- CVE-2020-13622JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns
- CVE-2020-13623JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.
- CVE-2020-13614An issue was discovered in ssl.c in Axel before 2.17.8.
- CVE-2020-13615lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates.
- CVE-2020-13616The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.
- CVE-2020-6830For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions.Mozilla Firefox for iOS
- CVE-2020-6831A buffer overflow could occur when parsing and validating SCTP chunks in WebRTC.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12387A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12388The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2020-12389The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape.Mozilla Firefox ESR · Mozilla Firefox
- CVE-2020-12390Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks.Mozilla Firefox
- CVE-2020-12391Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context.Mozilla Firefox
- CVE-2020-12392The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12393The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the webMozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12394A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different oMozilla Firefox
- CVE-2020-12395Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7.Mozilla Firefox ESR · Mozilla Firefox +1
- CVE-2020-12396Mozilla developers and community members reported memory safety bugs present in Firefox 75.Mozilla Firefox
- CVE-2020-8168We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AiAirMax AirOS for TI, XW and XM boards
- CVE-2020-8171We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AiAirMax AirOS for TI, XW and XM boards
- CVE-2020-8170We have recently released new version of AirMax AirOS firmware v6.3.0 for TI, XW and XM boards that fixes vulnerabilities found on AirMax AiAirMax AirOS for TI, XW and XM boards
- CVE-2020-10719A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes.Red Hat undertow · io.undertow:undertow-core
- CVE-2020-10751A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would onlThe Linux Foundation kernel
- CVE-2020-13487The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/ebbpress/bbpress
- CVE-2020-3811qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability.Debian netqmail
- CVE-2020-3812qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability.Debian netqmail