Skip to content
OpenAdvisories

Archive

May 2020

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2020-1956 Exploited Public exploit Scanner template EPSS 98%

    Command Injection in Kylin

    Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation.

    KEV Mar 25, 2022
  • High 7.0
    CVE-2020-1054 Exploited Public exploit EPSS 54%

    Win32k Elevation of Privilege Vulnerability

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then…

    KEV Nov 3, 2021
  • High 7.2
    CVE-2020-5741 Exploited Public exploit EPSS 73%

    Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute ar…

    KEV Mar 10, 2023