Skip to content
OpenAdvisories

Archive

22 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /22 June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.1
    CVE-2020-7658

    meinheld vulnerable to HTTP Request Smuggling

    meinheld prior to 1.0.2 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Content-Length and Transfer encoding header parsing.

    meinheld PyPI
  • Medium 6.8
    CVE-2020-11077

    HTTP Smuggling via Transfer-Encoding Header in Puma

    In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connections and the client adds another request in via HTTP pipelini…

    puma puma puma puma Debian Ubuntu RubyGems
  • Medium 5.9
    CVE-2020-10711

    A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occ…

    Red Hat kernel linux-raspi2 linux-hwe Debian Ubuntu
  • Medium 6.7
    CVE-2020-3184

    Cisco Prime Collaboration Provisioning Software SQL Injection Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based manag…

    Cisco Cisco Prime Collaboration Provisioning Network devices
  • Medium 6.1
    CVE-2020-3314

    Cisco AMP for Endpoints Mac Connector Software File Scan Denial of Service Vulnerability

    A vulnerability in the file scan process of Cisco AMP for Endpoints Mac Connector Software could cause the scan engine to crash during the scan of local files, resulting in a restart of the AMP Connector and a denial of service (DoS) condition of the Cisco AM…

    Cisco Cisco AMP for Endpoints Network devices
  • Medium 5.5
    CVE-2020-3343

    Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability

    A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient inpu…

    Cisco Cisco AMP for Endpoints Network devices
  • Medium 5.5
    CVE-2020-3344

    Cisco AMP for Endpoints Linux Connector and AMP for Endpoints Mac Connector Software Memory Buffer Vulnerability

    A vulnerability in Cisco AMP for Endpoints Linux Connector Software and Cisco AMP for Endpoints Mac Connector Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to insufficient inpu…

    Cisco Cisco AMP for Endpoints Network devices