CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- apache druidCredentials bypass in Apache Druid6.5 Medium
- apache dubboDeserialization of Untrusted Data in Apache Dubbo9.8 Critical
- apache solrIncorrect Authorization in Apache Solr4.3 Medium
- learndashLearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection.9.8 Critical
- becton, dickinson and company (bd) pyxis anesthesia (pas) es system, pyxis medstation es system, bd pyxis anesthesia station es firmware +1 more +3 moreIn BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted...6.1 Medium
- deskproAn issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to...7.5 High
- deskproAn issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly...6.5 Medium
- deskproAn issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly...8.8 High
- deskproAn issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly...7.6 High
- deskproAn issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify...9.1 Critical
- kubernetesKubernetes API Server denial of service vulnerability from malicious YAML payloads6.5 Medium
- marchnetworks command clientThe connection initiation process in March Networks Command Client before 2.7.2 allows remote...9.8 Critical
- tiki-wiki groupware cms, tiki tikiwiki cms\/groupware +1 moreCross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software6.5 Medium
- alienform2 project alienform2Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to...9.8 Critical
- apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 moreApache CXF JMX Integration is vulnerable to a MITM attack5.3 Medium
- ctfd rctfsession fixation in rCTF6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...5.3 Medium
- sonatype nexus, nexus repository +1 moreNexus Repository Manager 3 - Remote Code Execution8.8 High
- apache sling cms, apache software foundation sling +1 moreScripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when...6.1 Medium
- sonatype nexusRemote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager7.2 High
- apache ofbizData sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache...6.1 Medium
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...9.8 Critical
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...9.8 Critical
- sonatype nexusPersistent Cross-Site scripting in Nexus Repository Manager4.8 Medium
- apple ios, ipados, macos +4 more +6 moreMultiple memory corruption issues were addressed with improved state management. This issue is...7.8 High
- apple icloud, icloud for windows, ios +7 more +9 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...8.8 High
- apple ios, ipados, iphone os +2 moreThe issue was resolved by clearing application previews when content is deleted. This issue is...3.3 Low
- apple safariA logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A...4.3 Medium
- apple ios, ipados, iphone os +2 moreThe issue was addressed by clearing website permission prompts after navigation. This issue is...5.3 Medium
- apple ios, ipados, iphone os +2 moreThe issue was addressed with improved handling of icon caches. This issue is fixed in iOS 13.4...3.3 Low
- apple ios, ipados, iphone os +2 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and...6.5 Medium
- apple ios, ipados, iphone os +2 moreAn issue existed in the selection of video file by Mail. The issue was fixed by selecting the...5.3 Medium
- apple ios, ipados, iphone os +1 more +3 moreAn issue existed in the handling of tabs displaying picture in picture video. The issue was...5.3 Medium
- apple macos, mac os x +1 moreThis issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A...3.3 Low
- apple ios, ipados, tvos +2 more +4 moreA use after free issue was addressed with improved memory management. This issue is fixed in iOS...7.8 High
- apple macos, mac os x +1 moreMultiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS...9.8 Critical
- apple ios, ipados, macos +4 more +6 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...7.8 High
- apple icloud, icloud for windows, ios +9 more +11 moreA buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4...9.8 Critical
- apple ios, ipados, tvos +2 more +4 moreThis issue was addressed with a new entitlement. This issue is fixed in iOS 13.4 and iPadOS 13.4,...5.5 Medium
- apple ios, ipados, macos +4 more +6 moreA memory initialization issue was addressed with improved memory handling. This issue is fixed in...5.5 Medium
- apple icloud, icloud for windows, ios +9 more +11 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4...9.8 Critical
- apple ios, ipados, watchos +1 more +3 moreAn access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13...5.3 Medium
- apple ios, ipados, macos +3 more +5 moreA permissions issue existed. This issue was addressed with improved permission validation. This...7.8 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple icloud, icloud for windows, ios +10 more +12 moreA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4...9.8 Critical
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved input validation. This issue is fixed in...7.8 High
- apple macos, mac os x +1 moreAn out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS...7.1 High
- Show moreLoading…