CVEs published June 6, 2020
5 CVEs were published on June 6, 2020: 0 critical, 0 high.
- Published
- 5
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- platform/external/sqlite · sqlite
- 1
Medium, low and unrated 5
- CVE-2020-13890The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.
- CVE-2020-13889showAlert() in the administration panel in Bludit 3.12.0 allows XSS.
- CVE-2020-13883In WSO2 API Manager 3.0.0 and earlier, WSO2 API Microgateway 2.2.0, and WSO2 IS as Key Manager 5.9.0 and earlier, Management Console allows
- CVE-2020-13881In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are use
- CVE-2020-13871SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.platform/external/sqlite · sqlite