CVEs published May 28, 2020
31 CVEs were published on May 28, 2020: 0 critical, 7 high.
- Published
- 31
- Critical
- 0
- High
- 7
- Medium
- 10
- Low
- 2
- Unrated
- 12
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- IBM Security Identity Governance and Intelligence
- 8
- Lenovo Printer LJ4010DN
- 2
- bbpress/bbpress
- 1
- Dell CPG BIOS
- 1
- Drupal Core · drupal/core
- 1
- IBM Jazz Reporting Service
- 1
- Kaminari
- 1
- Kaoni ezHTTPTrans
- 1
- PCoIP Standard Agent for Windows, PCoIP Graphics Agent for…
- 1
- skoranga node-dns-sync · dns-sync
- 1
High 7
- CVE-2020-5357Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerabiliDell CPG BIOS
- CVE-2020-11079command injection fix in node-dns-syncskoranga node-dns-sync · dns-sync
- CVE-2020-4246IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dIBM Security Identity Governance and Intelligence
- CVE-2020-7812Kaoni ezHTTPTrans Active-X File Download and Execution VulnerabilityKaoni ezHTTPTrans
- CVE-2020-13642An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
- CVE-2020-13643An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
- CVE-2020-13641An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress.
Medium, low and unrated 24
- CVE-2020-13693An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.bbpress/bbpress
- CVE-2020-11082Cross-Site Scripting in KaminariKaminari
- CVE-2020-13173Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 1PCoIP Standard Agent for Windows, PCoIP Graphics Agent for…
- CVE-2019-6342Drupal core - Critical - Access bypass - SA-CORE-2019-008Drupal Core · drupal/core
- CVE-2020-13660CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name.
- CVE-2020-13245Certain NETGEAR devices are affected by Missing SSL Certificate Validation.
- CVE-2020-8330A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggeredLenovo Printer LJ4010DN
- CVE-2020-8329A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggeredLenovo Printer LJ4010DN
- CVE-2020-4248IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed techniIBM Security Identity Governance and Intelligence
- CVE-2020-4419IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.IBM Jazz Reporting Service
- CVE-2020-4249IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the syteIBM Security Identity Governance and Intelligence
- CVE-2020-4245IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it IBM Security Identity Governance and Intelligence
- CVE-2020-4244IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumerIBM Security Identity Governance and Intelligence
- CVE-2020-4233IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failureIBM Security Identity Governance and Intelligence
- CVE-2020-4232IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials whichIBM Security Identity Governance and Intelligence
- CVE-2020-4231IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous IBM Security Identity Governance and Intelligence
- CVE-2020-13362In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a g
- CVE-2020-13649parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_
- CVE-2020-13361In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS user
- CVE-2019-20807In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scripting interfaces (e.g., Pyth
- CVE-2020-11950VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execu
- CVE-2020-11949testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an a
- CVE-2020-13645In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certific
- CVE-2020-13644An issue was discovered in the Accordion plugin before 2.2.9 for WordPress.