CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- certtools intelmq manager, intelmq manager project manager +1 more Remote code execution in Message sending functionality in IntelMQ Manager 9.1 Critical
- torchbox wagtail Potential Observable Timing Discrepancy in Wagtail 6.1 Medium
- wordpress, debian linux +1 more Specially crafted filenames in WordPress leading to XSS 8.7 High
- wordpress, debian linux +1 more Unauthenticated disclosure of certain private posts in WordPress 5.8 Medium
- wordpress, debian linux +1 more Cross-site scripting in stats method (object cache) in WordPress 5.8 Medium
- wordpress, debian linux +1 more Cross-site scripting (XSS) in Search block in WordPress 6.4 Medium
- wordpress, debian linux +1 more Authenticated cross-site scripting (XSS) in WordPress Customizer 5.8 Medium
- huawei oceanstor 5310 firmware Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access... 7.5 High
- honor pcmanager Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability.... 7.8 High
- zte zxctn 6500 firmware A ZTE product is impacted by a resource management error vulnerability. An attacker could exploit... 4.9 Medium
- zte oscp ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the... 6.5 Medium
- zte zenic one r22b ZTE's SDON controller is impacted by the resource management error vulnerability. When RPC is... 5.5 Medium
- f5 big-ip, big-iq, big-ip access policy manager +11 more +13 more On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7... 5.5 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE)... 8.1 High
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +1 more +3 more In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and... 6.7 Medium
- f5 big-ip edge client, big-ip access policy manager, big-ip access policy manager client +2 more In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure... 3.7 Low
- f5 big-ip apm, big-ip access policy manager +1 more On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a... 5.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +7 more +9 more On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for... 7.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP... 9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 more On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual... 7.5 High
- f5 big-ip asm, big-ip application security manager +1 more On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane... 7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 more On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE)... 9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP... 9.1 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1,... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5... 9.1 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1... 8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management... 7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel... 7.5 High
- f5 big-ip, big-iq, big-ip access policy manager +11 more +13 more On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and... 7.2 High
- f5 big-ip apm, big-ip access policy manager +1 more On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing... 7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent... 7.5 High
- apache ofbiz Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks. 8.8 High
- apache ofbiz Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host 7.5 High
- hewlett packard enterprise smart update manager (sum), hpe smart update manager +1 more A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow... 9.8 Critical
- suculent thinx-device-api Device Authentication Vulnerability in thinx-device-api IoT Device Management Server 7.5 High
- red hat ansible, redhat ansible engine, ansible tower +2 more Path Traversal in Ansible 5.2 Medium
- sqliteodbc project sqliteodbc, fedoraproject fedora, opensuse backports sle +2 more SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition... 7.0 High
- thimpress learnpress LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection 8.8 High
- xt-commerce The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to... 4.3 Medium
- bmcsoftware control-m\/agent A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action... 8.8 High
- bmcsoftware control-m\/agent BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy. 8.8 High
- bmcsoftware control-m\/agent BMC Control-M/Agent 7.0.00.000 allows OS Command Injection. 8.8 High
- bmcsoftware control-m\/agent BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage. 7.5 High
- bmcsoftware control-m\/agent BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download. 7.5 High
- bmcsoftware control-m\/agent BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2). 8.8 High
- mailbeez Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive... 6.1 Medium
- Show olderLoading…