InfoSec Signals™
Sign InStart Free

CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,207 CVEs published, 335 critical, and 8 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

Published in the last 7 days
5,207
Show in the list
Critical, last 7 days
335
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,748
Show in the list
Clear
101,527 CVEs, showing 1351 to 1400PreviousPage 28 of 2,031Next
CVESeverityTitlePublished
CVE-2020-5730
Healthcare
Medium 6.1In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.
Assigned by tenable
Apr 17, 2020
CVE-2020-5731
Healthcare
Medium 6.1In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.
Assigned by tenable
Apr 17, 2020
CVE-2020-1751Medium 5.1An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal trampolines on PowerPC.
Assigned by redhat
Apr 17, 2020
CVE-2020-1967High 7.5Segmentation fault in SSL_check_chain
Assigned by openssl
Apr 21, 2020
CVE-2020-6820
Known exploited
High 8.1Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
Assigned by mozilla
Apr 24, 2020
CVE-2020-6819
Known exploited
High 8.1Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.
Assigned by mozilla
Apr 24, 2020
CVE-2020-12271
Known exploited
Critical 10.0A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020.
Assigned by mitre
Apr 27, 2020
CVE-2020-12243High 7.5In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).
Assigned by mitre
Apr 28, 2020
CVE-2020-11022
Healthcare
Medium 6.9jQuery has a potential XSS vulnerability
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-11023
Known exploited
Healthcare
Medium 6.9Potential XSS vulnerability in jQuery
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-11674
Healthcare
High 8.8Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
Assigned by mitre
Apr 29, 2020
CVE-2020-11675
Healthcare
High 8.8Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
Assigned by mitre
Apr 29, 2020
CVE-2020-11676
Healthcare
High 8.8Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
Assigned by mitre
Apr 29, 2020
CVE-2020-11677
Healthcare
High 8.8Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
Assigned by mitre
Apr 29, 2020
CVE-2020-1752High 7.0A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out.
Assigned by redhat
Apr 30, 2020
CVE-2020-11651
Known exploited
Critical 9.8An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
Assigned by mitre
Apr 30, 2020
CVE-2020-11652
Known exploited
Medium 6.5An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2.
Assigned by mitre
Apr 30, 2020
CVE-2020-1631
Known exploited
High 8.8Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
Assigned by juniper
May 4, 2020
CVE-2020-12641
Known exploited
Critical 9.8rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Assigned by mitre
May 4, 2020
CVE-2020-3259
Known exploited
High 7.5Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability
Assigned by cisco
May 6, 2020
CVE-2020-4427
Known exploited
Critical 9.0IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication.
Assigned by ibm
May 7, 2020
CVE-2020-4428
Known exploited
Critical 9.1IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system.
Assigned by ibm
May 7, 2020
CVE-2020-4430
Known exploited
Medium 4.3IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system.
Assigned by ibm
May 7, 2020
CVE-2020-5741
Known exploited
High 7.2Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.
Assigned by tenable
May 8, 2020
CVE-2020-12762High 7.8json-c through 0.14 has an integer overflow and out-of-bounds write via a large JSON file, as demonstrated by printbuf_memappend.
Assigned by mitre
May 9, 2020
CVE-2019-20794Medium 4.7An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed.
Assigned by mitre
May 9, 2020
CVE-2019-20795Medium 4.4iproute2 before 5.1.0 has a use-after-free in get_netnsid_from_name in ip/ipnetns.c.
Assigned by mitre
May 9, 2020
CVE-2020-12769Medium 5.5An issue was discovered in the Linux kernel before 5.4.17.
Assigned by mitre
May 9, 2020
CVE-2019-19721High 7.8An off-by-one error in the DecodeBlock function in codec/sdl_image.c in VideoLAN VLC media player before 3.0.9 allows remote attackers to cause a denial of service (memory corruption) via a crafted i…
Assigned by mitre
May 15, 2020
CVE-2020-9484High 7.0When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server;…
Assigned by apache
May 20, 2020
CVE-2020-1054
Known exploited
High 7.0Win32k Elevation of Privilege Vulnerability
Assigned by microsoft
May 21, 2020
CVE-2020-1956
Known exploited
High 8.8Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command withou…
Assigned by apache
May 22, 2020
CVE-2020-13435Medium 5.5SQLite through 3.32.0 has a segmentation fault in sqlite3ExprCodeTarget in expr.c.
Assigned by mitre
May 24, 2020
CVE-2020-13434Medium 5.5SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
Assigned by mitre
May 24, 2020
CVE-2020-13632Medium 5.5ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query.
Assigned by mitre
May 27, 2020
CVE-2020-13631Medium 5.5SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
Assigned by mitre
May 27, 2020
CVE-2020-13630High 7.0ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature.
Assigned by mitre
May 27, 2020
CVE-2020-8816
Known exploited
Critical 9.1Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.
Assigned by mitre
May 29, 2020
CVE-2020-12062High 7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbit…
Assigned by mitre
Jun 1, 2020
CVE-2020-5410
Known exploited
High 7.5Directory Traversal with spring-cloud-config-server
Assigned by pivotal
Jun 2, 2020
CVE-2020-13776Medium 6.7systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user acc…
Assigned by mitre
Jun 3, 2020
CVE-2020-13777High 7.4GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3).
Assigned by mitre
Jun 4, 2020
CVE-2020-10543High 8.2Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Assigned by mitre
Jun 5, 2020
CVE-2020-10878High 8.6Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.
Assigned by mitre
Jun 5, 2020
CVE-2020-12723High 7.5regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Assigned by mitre
Jun 5, 2020
CVE-2020-9859
Known exploited
High 7.8A memory consumption issue was addressed with improved memory handling.
Assigned by apple
Jun 5, 2020
CVE-2020-13871High 7.5SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite for window functions is too late.
Assigned by mitre
Jun 6, 2020
CVE-2020-13965
Known exploited
Medium 6.3An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5.
Assigned by mitre
Jun 9, 2020
CVE-2020-9819
Known exploited
Medium 4.3A memory consumption issue was addressed with improved memory handling.
Assigned by apple
Jun 9, 2020
CVE-2020-9818
Known exploited
High 8.8An out-of-bounds write issue was addressed with improved bounds checking.
Assigned by apple
Jun 9, 2020
PreviousPage 28 of 2,031Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.