Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: May 2020

54 records · 10 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2020-7351
    55Plan

    Fonality Trixbox CE Post-Authentication Command Injection

    HighCVSS 8.8WeaponizedEPSS 65%

    netfortris · trixboxMay 1, 2020

  • CVE-2020-1631
    70This week

    Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services

    CriticalCVSS 9.8KEVWeaponizedEPSS 4%

    juniper · junosMay 4, 2020

  • CVE-2020-12110
    43Plan

    Certain TP-Link devices have a Hardcoded Encryption Key.

    CriticalCVSS 9.8No exploitEPSS 13%

    tp-link · nc200 firmwareMay 4, 2020

  • CVE-2020-12641
    94Now

    rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration set

    CriticalCVSS 9.8KEVWeaponizedEPSS 84%

    roundcube · webmailMay 4, 2020

  • CVE-2020-12109
    57Plan

    Certain TP-Link devices allow Command Injection.

    HighCVSS 8.8WeaponizedEPSS 74%

    tp-link · nc200 firmwareMay 4, 2020

  • CVE-2020-2184
    30Monitor

    A cross-site request forgery vulnerability in Jenkins CVS Plugin 2.15 and earlier allows attackers to create and manipulate tags, and to con

    MediumCVSS 4.3No exploitEPSS 44%

    jenkins · current versions systemsMay 6, 2020

  • CVE-2020-7806
    39Monitor

    Tobesoft Xplatform ActiveX File Download Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    tobesoft · xplatformMay 6, 2020

  • CVE-2020-3187
    65This week

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability

    CriticalCVSS 9.1Proof of conceptEPSS 96%

    cisco · secure firewall threat defenseMay 6, 2020

  • CVE-2020-3259
    82Now

    Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability

    HighCVSS 7.5KEVWeaponizedEPSS 71%

    cisco · secure firewall threat defenseMay 6, 2020

  • CVE-2020-7473
    34Monitor

    In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releas

    HighCVSS 7.5Proof of conceptEPSS 14%

    citrix · sharefile storagezones controllerMay 7, 2020

  • CVE-2020-8982
    38Monitor

    An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, includi

    HighCVSS 7.5Proof of conceptEPSS 27%

    citrix · sharefile storagezones controllerMay 7, 2020

  • CVE-2020-12608
    38Monitor

    An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent.

    HighCVSS 7.8Proof of conceptEPSS 22%

    solarwinds · managed service provider patch management engineMay 7, 2020

  • CVE-2020-12116
    59Plan

    Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary

    HighCVSS 7.5Proof of conceptEPSS 97%

    zohocorp · manageengine opmanagerMay 7, 2020

  • CVE-2020-4427
    90Now

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when config

    CriticalCVSS 9.8KEVWeaponizedEPSS 70%

    ibm · data risk managerMay 7, 2020

  • CVE-2020-4428
    85Now

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system

    CriticalCVSS 9.1KEVWeaponizedEPSS 61%

    ibm · data risk managerMay 7, 2020

  • CVE-2020-4429
    61This week

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrative account.

    CriticalCVSS 9.8WeaponizedEPSS 71%

    ibm · data risk managerMay 7, 2020

  • CVE-2020-4430
    68This week

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system.

    MediumCVSS 4.3KEVWeaponizedEPSS 68%

    ibm · data risk managerMay 7, 2020

  • CVE-2020-12720
    66This week

    vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

    CriticalCVSS 9.8WeaponizedEPSS 88%

    vbulletin · vbulletinMay 7, 2020

  • CVE-2020-5741
    80Now

    Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.

    HighCVSS 7.2KEVWeaponizedEPSS 72%

    plex · media serverMay 8, 2020

  • CVE-2020-11530
    68This week

    A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin.

    CriticalCVSS 9.8WeaponizedEPSS 95%

    idangero · chop sliderMay 8, 2020

  • CVE-2020-11531
    39Monitor

    The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name whe

    HighCVSS 8.8No exploitEPSS 13%

    zohocorp · manageengine adaudit plusMay 8, 2020

  • CVE-2020-11532
    62This week

    Zoho ManageEngine DataSecurity Plus prior to 6.0.1 uses default admin credentials to communicate with a DataEngine Xnode server.

    CriticalCVSS 9.8WeaponizedEPSS 77%

    zohocorp · manageengine adaudit plusMay 8, 2020

  • CVE-2020-9315
    55Plan

    ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Admi

    HighCVSS 7.5Proof of conceptEPSS 81%

    oracle · iplanet web serverMay 10, 2020

  • CVE-2020-11108
    58Plan

    The Gravity updater in Pi-hole through 4.4 allows an authenticated adversary to upload arbitrary files.

    HighCVSS 8.8WeaponizedEPSS 78%

    pi-hole · pi-holeMay 11, 2020

  • CVE-2018-1285
    44Plan

    Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files.

    CriticalCVSS 9.8Proof of conceptEPSS 17%

    apache · log4netMay 11, 2020

  • CVE-2020-10021
    31Monitor

    Out-of-bounds write in USB Mass Storage with unaligned sizes

    HighCVSS 7.8No exploitEPSS 0%

    zephyrproject · zephyrMay 11, 2020

  • CVE-2020-11060
    38Monitor

    Remote Code Execution in GLPI

    HighCVSS 8.8Proof of conceptEPSS 10%

    glpi-project · glpiMay 12, 2020

  • CVE-2019-16112
    38Monitor

    TylerTech Eagle 2018.3.11 deserializes untrusted user input, resulting in remote code execution via a crafted Java object to the recorder/Se

    HighCVSS 8.8Proof of conceptEPSS 11%

    tylertech · eagleMay 13, 2020

  • CVE-2020-11971
    34Monitor

    Apache Camel's JMX is vulnerable to Rebind Flaw.

    HighCVSS 7.5No exploitEPSS 13%

    apache · camelMay 14, 2020

  • CVE-2020-12834
    42Plan

    eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.ru

    CriticalCVSS 9.8No exploitEPSS 11%

    eq-3 · homematic ccu2 firmwareMay 15, 2020

  • CVE-2020-12259
    50Plan

    rConfig 3.9.4 is vulnerable to reflected XSS.

    MediumCVSS 5.4Proof of conceptEPSS 96%

    rconfig · rconfigMay 18, 2020

  • CVE-2020-12255
    51Plan

    rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality.

    HighCVSS 8.8Proof of conceptEPSS 52%

    rconfig · rconfigMay 18, 2020

  • CVE-2020-12256
    50Plan

    rConfig 3.9.4 is vulnerable to reflected XSS.

    MediumCVSS 5.4Proof of conceptEPSS 95%

    rconfig · rconfigMay 18, 2020

  • CVE-2020-6074
    48Plan

    An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155.

    HighCVSS 8.8No exploitEPSS 41%

    gonitro · nitro proMay 18, 2020

  • CVE-2020-6092
    44Plan

    An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects.

    HighCVSS 7.8No exploitEPSS 43%

    gonitro · nitro proMay 18, 2020

  • CVE-2020-13144
    38Monitor

    Studio in Open edX Ironwood 2.5, when CodeJail is not used, allows a user to go to the "Create New course>New section>New subsection>New uni

    HighCVSS 8.8Proof of conceptEPSS 10%

    edx · open edx platformMay 18, 2020

  • CVE-2020-8616
    37Monitor

    BIND does not sufficiently limit the number of fetches performed when processing referrals

    HighCVSS 8.6No exploitEPSS 10%

    isc · bindMay 19, 2020

  • CVE-2020-8617
    60This week

    A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

    MediumCVSS 5.9WeaponizedEPSS 93%

    isc · bindMay 19, 2020

  • CVE-2020-10030
    42Plan

    An issue has been found in PowerDNS Recursor 4.1.0 up to and including 4.3.0.

    HighCVSS 8.8No exploitEPSS 23%

    powerdns · recursorMay 19, 2020

  • CVE-2020-13166
    62This week

    The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all

    CriticalCVSS 9.8WeaponizedEPSS 77%

    mylittletools · mylittleadminMay 19, 2020

  • CVE-2020-13167
    67This week

    Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) la

    CriticalCVSS 9.8WeaponizedEPSS 94%

    netsweeper · netsweeperMay 19, 2020

  • CVE-2020-12835
    43Plan

    An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5.

    CriticalCVSS 9.8No exploitEPSS 13%

    smartbear · readyapiMay 20, 2020

  • CVE-2020-3956
    41Plan

    VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly han

    HighCVSS 8.8Proof of conceptEPSS 21%

    vmware · vcloud directorMay 20, 2020

  • CVE-2020-9484
    45Plan

    When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able

    HighCVSS 7.0Proof of conceptEPSS 55%

    apache · tomcatMay 20, 2020

  • CVE-2020-5752
    40Plan

    Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system

    HighCVSS 7.8WeaponizedEPSS 8%

    druva · insync clientMay 21, 2020

  • CVE-2020-1048
    40Plan

    Windows Print Spooler Elevation of Privilege Vulnerability

    HighCVSS 7.8WeaponizedEPSS 16%

    microsoft · windows 10May 21, 2020

  • CVE-2020-1118
    39Monitor

    Microsoft Windows Transport Layer Security Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 15%

    microsoft · windows 10May 21, 2020

  • CVE-2020-1054
    74This week

    Win32k Elevation of Privilege Vulnerability

    HighCVSS 7.0KEVWeaponizedEPSS 53%

    microsoft · windows 10 1507May 21, 2020

  • CVE-2020-1956
    94Now

    Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a

    HighCVSS 8.8KEVWeaponizedEPSS 97%

    apache · kylinMay 22, 2020

  • CVE-2020-8604
    60This week

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on

    HighCVSS 7.5WeaponizedEPSS 89%

    trendmicro · interscan web security virtual applianceMay 27, 2020

  • CVE-2020-8605
    61This week

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to execute arbitrary code on affected

    HighCVSS 8.8WeaponizedEPSS 87%

    trendmicro · interscan web security virtual applianceMay 27, 2020

  • CVE-2020-8606
    61This week

    A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to bypass authentication on affected

    CriticalCVSS 9.8WeaponizedEPSS 73%

    trendmicro · interscan web security virtual applianceMay 27, 2020

  • CVE-2020-13693
    52Plan

    An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

    CriticalCVSS 9.8Proof of conceptEPSS 43%

    bbpress · bbpressMay 28, 2020

  • CVE-2020-8816
    81Now

    Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

    HighCVSS 7.2KEVWeaponizedEPSS 78%

    pi-hole · pi-holeMay 29, 2020