CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- apple macos, mac os x +1 moreMultiple memory corruption issues were addressed with improved state management. This issue is...7.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreAn input validation issue was addressed with improved input validation. This issue is fixed in...6.1 Medium
- apple macos, mac os x +1 moreA logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10...7.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...8.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS...8.8 High
- apple icloud, icloud for windows, ios +8 more +10 moreA memory consumption issue was addressed with improved memory handling. This issue is fixed in...8.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreA race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and...3.1 Low
- apple icloud, icloud for windows, ios +8 more +10 moreA type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13...8.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple ios, watchos, ipad os +1 more +3 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and...2.4 Low
- apple icloud, icloud for windows, ios +7 more +9 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...4.3 Medium
- apple icloud, icloud for windows, ios +7 more +9 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...4.3 Medium
- apple ios, ipad os, iphone os +2 moreThe issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4....5.3 Medium
- apple ios, ipad os, iphone os +2 moreA logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and...4.3 Medium
- apple ios, macos, tvos +4 more +6 moreThis issue was addressed with improved checks. This issue is fixed in iOS 13.4 and iPadOS 13.4,...8.8 High
- apple macos, mac os x +1 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Catalina...5.5 Medium
- apple macos, mac os x +1 moreAn injection issue was addressed with improved validation. This issue is fixed in macOS Catalina...6.1 Medium
- apple macos, mac os x +1 moreA logic issue was addressed with improved state management. This issue is fixed in macOS Catalina...5.5 Medium
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...9.8 Critical
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...6.5 Medium
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.8 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx...7.5 High
- avast antivirusAn issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite...7.5 High
ecstaticnpmOpen Redirect in ecstaticNo score- netgear wc7500, wc7520, wc7600v1 +7 more +9 moreNETGEAR has released fixes for a pre-authentication command injection in request_handler.php...9.8 Critical
- parrot anafi firmwareParrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated...7.5 High
- parrot anafi firmwareWeb server running on Parrot ANAFI can be crashed due to the SDK command "Common_CurrentDateTime"...7.5 High
- advantech webaccessAdvantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated,...7.5 High
- limesurveyLimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application...9.8 Critical
- limesurveyLimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups...5.4 Medium
- netgate pfsensepfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the...5.4 Medium
- technicolor tc7337 firmwareAn issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin...7.5 High
- tp-link nc200 firmware, nc210 firmware, nc220 firmware +4 more +6 moreTP-Link NC200 through 2.1.8_Build_171109, NC210 through 1.0.9_Build_171214, NC220 through 1.3...7.5 High
- auth0 login by auth0An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. A user can...8.8 High
- auth0 login by auth0An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous...9.8 Critical
- auth0 wp-auth0Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for...8.8 High
- auth0 login by auth0The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a...6.1 Medium
- auth0 wp-auth0A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for...6.1 Medium
- yamaha fwx120 firmware, nvr500 firmware, nvr510 firmware +8 more +10 moreYamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router...7.5 High
- mcafee endpoint security, mcafee, llc endpoint security (ens) for window +1 moreENS configuration can be edited by attacker with local administrator permissions6.5 Medium
- tp-link kc200 firmware, kc300s2 firmware, kc310s2 firmware +12 more +14 moreTP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and...5.3 Medium
- php, debian linux, opensuse leap +1 more +3 moreget_headers() silently truncates after a null byte5.3 Medium
- php, canonical ubuntu linux, debian linux +1 more +3 moremb_strtolower (UTF-32LE): stack-buffer-overflow at php_unicode_tolower_full7.4 High
- Show moreLoading…