Skip to content
OpenAdvisories

Archive

May 2020

Vulnerabilities first published in this month (UTC), newest first.

← April 2020 2020 / May June 2020 →
  1. 16
  2. 23
  3. 31
  4. 449
  5. 539
  6. 679
  7. 777
  8. 837
  9. 914
  10. 102
  11. 1147
  12. 1247
  13. 1363
  14. 1470
  15. 1531
  16. 165
  17. 1710
  18. 1840
  19. 1936
  20. 2030
  21. 21168
  22. 2232
  23. 232
  24. 248
  25. 257
  26. 2627
  27. 2730
  28. 2831
  29. 2941
  30. 30 
  31. 31 
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2020-11019 Public exploit

    Out of bound read in update_recv in FreeRDP

    In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as string to local terminal. This has been fixed in 2.1.0.

    FreeRDP FreeRDP freerdp2 freerdp2 Debian Ubuntu
  • Medium 5.4
    CVE-2020-10135 Public exploit

    Bluetooth devices supporting BR/EDR v5.2 and earlier are vulnerable to impersonation attacks

    Legacy pairing and secure-connections pairing authentication in Bluetooth BR/EDR Core Specification v5.2 and earlier may allow an unauthenticated user to complete authentication without pairing credentials via adjacent access. An unauthenticated, adjacent att…

    Bluetooth BR/EDR linux-raspi2 linux-hwe Ubuntu
  • Medium 6.1
    CVE-2020-7656 Public exploit

    Cross-Site Scripting in jquery

    jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.

    jquery-rails jquery org.webjars.npm:jquery jQuery Ubuntu npm Maven NuGet RubyGems
  • Medium 5.4
    CVE-2020-13094 Public exploit

    XSS in Dolibarr

    Dolibarr before 11.0.4 allows XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium —
    CVE-2019-17572 Public exploit

    Directory traversal in Apache RocketMQ

    In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent from rocketmq-client to the broker, a topic folder will be created in the parent directory in broker…

    org.apache.rocketmq:rocketmq-broker Maven