Skip to content
OpenAdvisories

Archive

May 2020

Vulnerabilities first published in this month (UTC), newest first.

← April 2020 2020 / May June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Critical 9.1
    CVE-2020-8816 Exploited Public exploit EPSS 78%

    Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static …

    KEV Dec 10, 2021
  • High 8.8
    CVE-2020-1956 Exploited Public exploit Scanner template EPSS 97%

    Command Injection in Kylin

    Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

    Apache Kylin org.apache.kylin:kylin-core-common Maven
    KEV Mar 25, 2022
  • High 7.0
    CVE-2020-1054 Exploited Public exploit EPSS 54%

    Win32k Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Nov 3, 2021
  • High 7.2
    CVE-2020-5741 Exploited Public exploit EPSS 73%

    Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

    Windows
    KEV Mar 10, 2023
  • Medium 4.3
    CVE-2020-4430 Exploited EPSS 69%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directorie…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Critical 9.1
    CVE-2020-4428 Exploited Public exploit EPSS 62%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary c…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Critical 9.0
    CVE-2020-4427 Exploited Public exploit Scanner template EPSS 70%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security res…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-3259 Exploited · Ransomware EPSS 72%

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to retrieve memory contents on an affected device, which could …

    Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
    KEV Feb 15, 2024
  • Critical 9.8
    CVE-2020-12641 Exploited Public exploit Scanner template EPSS 84%

    rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters i…

    roundcube roundcube Debian Ubuntu
    KEV Jun 22, 2023
  • High 8.8
    CVE-2020-1631 Exploited

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI)…

    Juniper Networks Junos OS Network devices
    KEV Mar 25, 2022