CVEs published May 27, 2020
28 CVEs were published on May 27, 2020: 2 critical, 2 high.
- Published
- 28
- Critical
- 2
- High
- 2
- Medium
- 9
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- IBM Spectrum Scale
- 7
- Trend Micro InterScan Web Security Virtual Appliance
- 4
- sqlite
- 3
- anchore-engine
- 1
- Bosch Recording Station
- 1
- centreon/centreon
- 1
- forkcms/forkcms
- 1
- IBM MobileFirst Platform Foundation
- 1
- IPFS AEgir · aegir
- 1
- Red Hat oddjob
- 1
Critical 2
High 2
Medium, low and unrated 24
- CVE-2020-8606A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected Trend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8604A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on Trend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8605A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affectedTrend Micro InterScan Web Security Virtual Appliance
- CVE-2020-8603A cross-site scripting vulnerability (XSS) in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow a remote attacker to tamperTrend Micro InterScan Web Security Virtual Appliance
- CVE-2020-10936Sympa before 6.2.56 allows privilege escalation.
- CVE-2020-13628Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-m
- CVE-2020-13627Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to servic
- CVE-2020-10946Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-mo
- CVE-2020-10945Centreon before 19.10.7 exposes Session IDs in server responses.centreon/centreon
- CVE-2020-13633Fork before 5.8.3 allows XSS via navigation_title or title.forkcms/forkcms
- CVE-2020-13630ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.sqlite
- CVE-2020-13631SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.sqlite
- CVE-2020-13632ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.sqlite
- CVE-2020-13253sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations.
- CVE-2020-4379IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highlyIBM Spectrum Scale
- CVE-2020-4378IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially craIBM Spectrum Scale
- CVE-2020-4358IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting.IBM Spectrum Scale
- CVE-2020-4357IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error mesIBM Spectrum Scale
- CVE-2020-4350IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highlyIBM Spectrum Scale
- CVE-2020-4349IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highlyIBM Spectrum Scale
- CVE-2020-4348IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actionIBM Spectrum Scale
- CVE-2020-4226IBM MobileFirst Platform Foundation 8.0.0.0 stores highly sensitive information in URL parameters.IBM MobileFirst Platform Foundation
- CVE-2019-20806An issue was discovered in the Linux kernel before 5.2.
- CVE-2020-10737A race condition was found in the mkhomedir tool shipped with the oddjob package in versions before 0.34.5 and 0.34.6 wherein, during the hoRed Hat oddjob