2020-05-15 - CVE Archive

CVE-2020-11526 May 15, 17:15 LOW POC PATCH Monitor

libfreerdp/core/update.c in FreeRDP versions > 1.1 through 2.0.0-rc4 has an Out-of-bounds Read. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable. Public exploit code available.

Buffer Overflow Information Disclosure Debian Canonical Debian Linux +4

NVD GitHub

CVSS 3.1

2.2

EPSS

2.0%

CVE-2020-11525 May 15, 17:15 LOW POC PATCH Monitor

libfreerdp/cache/bitmap.c in FreeRDP versions > 1.0 through 2.0.0-rc4 has an Out of bounds read. Rated low severity (CVSS 2.2), this vulnerability is remotely exploitable. Public exploit code available.

Buffer Overflow Information Disclosure Debian Canonical Debian Linux +4

NVD GitHub

CVSS 3.1

2.2

EPSS

1.7%

CVE-2020-11931 May 15, 04:15 LOW Monitor

An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of intended access restriction for snaps which plugs any of. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Ubuntu Canonical Ubuntu Linux Pulseaudio

NVD

CVSS 3.1

3.3

EPSS

0.3%

CVE-2020-9073 May 15, 14:15 LOW Monitor

Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. Rated low severity (CVSS 2.4), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Huawei P20 Firmware

NVD

CVSS 3.1

2.4

EPSS

0.2%