# CVEs published 2020-05-29

41 CVEs were published on May 29, 2020: 3 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-8482](https://cve.now/CVE-2020-8482.md): ABB Device Library Wizard Information Disclosure Vulnerability (CVSS 7.8, ABB Device Library Wizard)
- [CVE-2020-6937](https://cve.now/CVE-2020-6937.md): A Denial of Service vulnerability in MuleSoft Mule CE/EE 3.8.x, 3.9.x, and 4.x released before April 7, 2020, could allow remote attackers t (no CVSS, MuleSoft Mule CE/EE)
- [CVE-2020-11844](https://cve.now/CVE-2020-11844.md): Incorrect Authorization vulnerability in the Micro Focus Container Deployment Foundation affecting multiple products. (CVSS 10.0, Micro Focus Hybrid Cloud Management · Micro Focus ArcSig… +8)
- [CVE-2020-7650](https://cve.now/CVE-2020-7650.md): All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7654](https://cve.now/CVE-2020-7654.md): All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. (no CVSS, snyk-broker)
- [CVE-2020-7648](https://cve.now/CVE-2020-7648.md): All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7651](https://cve.now/CVE-2020-7651.md): All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7652](https://cve.now/CVE-2020-7652.md): All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-7653](https://cve.now/CVE-2020-7653.md): All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. (no CVSS, snyk-broker)
- [CVE-2020-1831](https://cve.now/CVE-2020-1831.md): HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1833](https://cve.now/CVE-2020-1833.md): Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. (no CVSS, Huawei Honor)
- [CVE-2020-3959](https://cve.now/CVE-2020-3959.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3958](https://cve.now/CVE-2020-3958.md): VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (no CVSS, VMware ESXi · VMware Workstation +1)
- [CVE-2020-3957](https://cve.now/CVE-2020-3957.md): VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain (no CVSS, VMware Fusion · VMware Remote Console for Mac +1)
- [CVE-2020-1809](https://cve.now/CVE-2020-1809.md): HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1797](https://cve.now/CVE-2020-1797.md): HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. (no CVSS, HUAWEI Mate)
- [CVE-2020-1870](https://cve.now/CVE-2020-1870.md): There is a denial of service vulnerability in some Huawei products. (no CVSS, Huawei CloudEngine · Huawei NE40E +2)
- [CVE-2020-1832](https://cve.now/CVE-2020-1832.md): E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. (no CVSS, Huawei E6878-370)
- [CVE-2020-1798](https://cve.now/CVE-2020-1798.md): HUAWEI P30 smartphones with versions earlier than 10.1.0.135(C00E135R2P11) have an improper authentication vulnerability. (no CVSS, HUAWEI P30)
- [CVE-2020-8816](https://cve.now/CVE-2020-8816.md): Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease. (CVSS 9.1, KEV)
- [CVE-2020-12493](https://cve.now/CVE-2020-12493.md): Critical Vulnerability in SWARCO CPU LS4000 (CVSS 10.0, SWARCO CPU LS4000)
- [CVE-2020-13634](https://cve.now/CVE-2020-13634.md): In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of (no CVSS)
- [CVE-2020-12675](https://cve.now/CVE-2020-12675.md): The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions (no CVSS)
- [CVE-2020-4490](https://cve.now/CVE-2020-4490.md): IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass secur (CVSS 5.3, IBM Business Process Manager Advanced · IBM Business Automa…)
- [CVE-2020-4352](https://cve.now/CVE-2020-4352.md): IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. (CVSS 4.9, IBM MQ for HPE NonStop)
- [CVE-2020-4306](https://cve.now/CVE-2020-4306.md): IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Planning Analytics Local)
- [CVE-2020-5572](https://cve.now/CVE-2020-5572.md): Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecif (no CVSS, Cybozu Android App 'Mailwise for Android')
- [CVE-2020-5573](https://cve.now/CVE-2020-5573.md): Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unsp (no CVSS, Cybozu Android App 'kintone mobile for Android')
- [CVE-2020-11017](https://cve.now/CVE-2020-11017.md): Double free in cliprdr\_server\_receive\_capabilities in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2020-11018](https://cve.now/CVE-2020-11018.md): Out of bound read in cliprdr\_server\_receive\_capabilities in FreeRDP (CVSS 6.5, FreeRDP)
- [CVE-2020-11019](https://cve.now/CVE-2020-11019.md): Out of bound read in update\_recv in FreeRDP (CVSS 4.3, FreeRDP)
- [CVE-2020-11038](https://cve.now/CVE-2020-11038.md): Integer Overflow to Buffer Overflow in FreeRDP (CVSS 6.9, FreeRDP)
- [CVE-2020-11039](https://cve.now/CVE-2020-11039.md): Integer Overflow in FreeRDP (CVSS 8.0, FreeRDP)
- [CVE-2020-11040](https://cve.now/CVE-2020-11040.md): Out-of-bounds Read in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11041](https://cve.now/CVE-2020-11041.md): Improper Validation of Array Index in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11043](https://cve.now/CVE-2020-11043.md): Out-of-bounds Read in FreeRDP (CVSS 2.2, FreeRDP)
- [CVE-2020-11085](https://cve.now/CVE-2020-11085.md): Out-of-bounds Read in FreeRDP (CVSS 2.6, FreeRDP)
- [CVE-2020-11086](https://cve.now/CVE-2020-11086.md): Out-of-bounds Read in FreeRDP \`ntlm\_read\_ntlm\_v2\_response\` (CVSS 3.1, FreeRDP)
- [CVE-2020-11087](https://cve.now/CVE-2020-11087.md): Out-of-bounds Read in FreeRDP (CVSS 3.1, FreeRDP)
- [CVE-2020-11088](https://cve.now/CVE-2020-11088.md): Out-of-bound read in FreeRDP (CVSS 3.1, FreeRDP)
- [CVE-2020-11089](https://cve.now/CVE-2020-11089.md): Out-of-bound read in FreeRDP (CVSS 3.7, FreeRDP)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-05-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.