CVE-2020-13614: An issue was discovered in ssl.c in Axel before 2.17.8.
An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification.
Published May 26, 2020 · Updated Aug 4, 2024
CVE archive
May 2020
Browse CVE records published in May 2020, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 1407 matching CVEs · Page 14 of 29.
CVE-2020-13649: parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as d...
parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all assertion failure.
Published May 28, 2020 · Updated Aug 4, 2024
CVE-2020-13645: In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verifica...
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server identity. This is in contrast to its intended documented behavior, to fail the certificate verification. Applications that fail to provide the server identity, including Balsa before 2.5.11 and 2.6.x before 2.6.1, accept a TLS certificate if the certificate is valid for any host.
Published May 28, 2020 · Updated Aug 4, 2024
CVE-2020-13642: An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress.
An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged on behalf of an administrator. The panels_data $_POST variable allows for malicious JavaScript to be executed in the victim's browser.
Published May 28, 2020 · Updated Aug 4, 2024
CVE-2020-13622: JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key...
JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data.
Published May 26, 2020 · Updated Aug 4, 2024
CVE-2020-13616: The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.
The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.
Published May 26, 2020 · Updated Aug 4, 2024
CVE-2020-13633: Fork before 5.8.3 allows XSS via navigation_title or title.
Fork before 5.8.3 allows XSS via navigation_title or title.
Published May 27, 2020 · Updated Aug 4, 2024
CVE-2020-13529: An exploitable denial-of-service vulnerability exists in Systemd 245.
An exploitable denial-of-service vulnerability exists in Systemd 245. A specially crafted DHCP FORCERENEW packet can cause a server running the DHCP client to be vulnerable to a DHCP ACK spoofing attack. An attacker can forge a pair of FORCERENEW and DCHP ACK packets to reconfigure the server.
Published May 10, 2021 · Updated Aug 4, 2024
CVE-2020-13486: The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13442: A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870.
A Remote code execution vulnerability exists in DEXT5Upload in DEXT5 through 2.7.1402870. An attacker can upload a PHP file via dext5handler.jsp handler because the uploaded file is stored under dext5uploadeddata/.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13487: The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in J...
The bbPress plugin through 2.6.4 for WordPress has stored XSS in the Forum creation section, resulting in JavaScript execution at wp-admin/edit.php?post_type=forum (aka the Forum listing page) for all users. An administrator can exploit this at the wp-admin/post.php?action=edit URI.
Published May 26, 2020 · Updated Aug 4, 2024
CVE-2020-13425: TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will event...
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
Published May 23, 2020 · Updated Aug 4, 2024
CVE-2020-13458: An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13430: Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13459: An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS.
An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There is stored XSS in the Bulk Resize action.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13434: SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13440: ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13429: legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Va...
legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header (aka legend header) option.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13438: ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13485: The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP he...
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13439: ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13433: Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13424: The XCloner component before 3.5.4 for Joomla!
The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure.
Published May 23, 2020 · Updated Aug 4, 2024
CVE-2020-13482: EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a...
EM-HTTP-Request 1.1.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified.
Published May 25, 2020 · Updated Aug 4, 2024
CVE-2020-13435: SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
Published May 24, 2020 · Updated Aug 4, 2024
CVE-2020-13413: An issue was discovered in Aviatrix Controller before 5.4.1204.
An issue was discovered in Aviatrix Controller before 5.4.1204. There is a Observable Response Discrepancy from the API, which makes it easier to perform user enumeration via brute force.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13362: In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafte...
In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
Published May 28, 2020 · Updated Aug 4, 2024
CVE-2020-13396: An issue was discovered in FreeRDP before 2.1.1.
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in ntlm_read_ChallengeMessage in winpr/libwinpr/sspi/NTLM/ntlm_message.c.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13417: An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomple...
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13415: An issue was discovered in Aviatrix Controller through 5.1.
An issue was discovered in Aviatrix Controller through 5.1. An attacker with any signed SAML assertion from the Identity Provider can establish a connection (even if that SAML assertion has expired or is from a user who is not authorized to access Aviatrix), aka XML Signature Wrapping.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13386: In SmartDraw 2020 27.0.0.0, the installer gives inherited write permissions to the Authenticated Users grou...
In SmartDraw 2020 27.0.0.0, the installer gives inherited write permissions to the Authenticated Users group on the SmartDraw 2020 installation folder. Additionally, when the product is installed, two scheduled tasks are created on the machine, SDMsgUpdate (Local) and SDMsgUpdate (TE). The scheduled tasks run in the context of the user who installed the product. Both scheduled tasks attempt to run the same binary, C:\SmartDraw 2020\Messages\SDNotify.exe. The folder Messages doesn't exist by default and (by extension) neither does SDNotify.exe. Due to the weak folder permissions, these can be created by any user. A malicious actor can therefore create a malicious SDNotify.exe binary, and have it automatically run, whenever the user who installed the product logs on to the machine. The malicious SDNotify.exe could, for example, create a new local administrator account on the machine.
Published May 27, 2020 · Updated Aug 4, 2024
CVE-2020-13388: An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package befor...
An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safe_load is not used.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13384: Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/inde...
Monstra CMS 3.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via admin/index.php?id=filesmanager because, for example, .php filenames are blocked but .php7 filenames are not, a related issue to CVE-2017-18048.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13398: An issue was discovered in FreeRDP before 2.1.1.
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) write vulnerability has been detected in crypto_rsa_common in libfreerdp/crypto/crypto.c.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13397: An issue was discovered in FreeRDP before 2.1.1.
An issue was discovered in FreeRDP before 2.1.1. An out-of-bounds (OOB) read vulnerability has been detected in security_fips_decrypt in libfreerdp/core/security.c due to an uninitialized value.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13392: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/setcfm funcpara1 parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13390: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/addressNat entrys and mitInterface parameters for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13416: An issue was discovered in Aviatrix Controller before 5.4.1066.
An issue was discovered in Aviatrix Controller before 5.4.1066. A Controller Web Interface session token parameter is not required on an API call, which opens the application up to a Cross Site Request Forgery (CSRF) vulnerability for password resets.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13414: An issue was discovered in Aviatrix Controller before 5.4.1204.
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13393: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/saveParentControlInfo deviceId and time parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13391: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetSpeedWan speed_dir parameter for a POST request, a value is directly used in a sprintf to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13361: In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame...
In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write() operation.
Published May 28, 2020 · Updated Aug 4, 2024
CVE-2020-13389: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/openSchedWifi schedStartTime and schedEndTime parameters for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13412: An issue was discovered in Aviatrix Controller before 5.4.1204.
An issue was discovered in Aviatrix Controller before 5.4.1204. An API call on the web interface lacked a session token check to control access, leading to CSRF.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13394: An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0...
An issue was discovered on Tenda AC6 V1.0 V15.03.05.19_multi_TD01, AC9 V1.0 V15.03.05.19(6318)_CN, AC9 V3.0 V15.03.06.42_multi, AC15 V1.0 V15.03.05.19_multi_TD01, and AC18 V15.03.05.19(6318_)_CN devices. There is a buffer overflow vulnerability in the router's web server -- httpd. While processing the /goform/SetNetControlList list parameter for a POST request, a value is directly used in a strcpy to a local variable placed on the stack, which overwrites the return address of a function. An attacker can construct a payload to carry out arbitrary code execution attacks.
Published May 22, 2020 · Updated Aug 4, 2024
CVE-2020-13253: sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read du...
sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process.
Published May 27, 2020 · Updated Aug 4, 2024
CVE-2020-13258: Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-...
Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated by the api parameter to the-example-app.py.
Published May 21, 2020 · Updated Aug 4, 2024
CVE-2020-13252: Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metachar...
Centreon before 19.04.15 allows remote attackers to execute arbitrary OS commands by placing shell metacharacters in RRDdatabase_status_path (via a main.get.php request) and then visiting the include/views/graphs/graphStatus/displayServiceStatus.php page.
Published May 21, 2020 · Updated Aug 4, 2024
CVE-2020-13249: libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an O...
libmariadb/mariadb_lib.c in MariaDB Connector/C before 3.1.8 does not properly validate the content of an OK packet received from a server. NOTE: although mariadb_lib.c was originally based on code shipped for MySQL, this issue does not affect any MySQL components supported by Oracle.
Published May 20, 2020 · Updated Aug 4, 2024
CVE-2020-13246: An issue was discovered in Gitea through 1.11.5.
An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another.
Published May 20, 2020 · Updated Aug 4, 2024