Archive

24 May 2020

Vulnerabilities first published on this day (UTC), newest first.

← April 2020 2020 / May /24 June 2020 →

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

Unscored —

CVE-2020-13438

ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.

May 24, 2020
Unscored —

CVE-2020-13440

ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.

May 24, 2020
Unscored —

CVE-2020-13439

ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.

May 24, 2020
Unscored —

CVE-2020-13434

SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.

sqlite3 sqlite3 ceph sqlite Debian Ubuntu Azure Linux Alpine

May 24, 2020
Unscored —

CVE-2020-13435

SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.

sqlite3 sqlite3 ceph sqlite Debian Ubuntu Azure Linux Alpine

May 24, 2020
Unscored —

CVE-2020-13433

Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.

May 24, 2020
Unscored —

CVE-2020-13429

legend.ts in the piechart-panel (aka Pie Chart Panel) plugin before 1.5.0 for Grafana allows XSS via the Values Header …

May 24, 2020
Medium 6.1

CVE-2020-13430

Grafana XSS via the OpenTSDB datasource

Grafana before 7.0.0 allows tag value XSS via the OpenTSDB datasource.

grafana github.com/grafana/grafana Ubuntu Go

May 24, 2020