Skip to content
OpenAdvisories

Archive

May 2020

Vulnerabilities first published in this month (UTC), newest first.

← April 2020 2020 / May June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

245 results · Clear filters · Feed

  • High 7.5
    CVE-2020-10187

    Exposure of Sensitive Information to an Unauthorized Actor in Doorkeeper

    Doorkeeper version 5.0.0 and later contains an information disclosure vulnerability that allows an attacker to retrieve the client secret only intended for the OAuth application owner. After authorizing the application and allowing access, the attacker simply…

    doorkeeper ruby-doorkeeper Debian RubyGems
  • High 8.4
    CVE-2020-8018

    User owned /etc in SLES15-SP1-CHOST-BYOS

    A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user …

    SUSE SUSE Linux Enterprise Server 15 SP1 Linux
  • High 8.6
    CVE-2019-11823

    CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attac…

    Synology Synology Router Manager (SRM)
  • High 8.8
    CVE-2020-1631 Exploited

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform local file inclusion (LFI)…

    Juniper Networks Junos OS Network devices
    KEV Mar 25, 2022
  • High 7.3
    CVE-2020-7351 Public exploit EPSS 64%

    Fonality Trixbox CE Post-Authentication Command Injection

    An OS Command Injection vulnerability in the endpoint_devicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been …

    Fonality Trixbox Community Edition