CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- huawei smartax ea5800 firmware, smartax ma5600t firmware, smartax ma5800 firmware +2 moreThere is a buffer overflow vulnerability in some Huawei products. The vulnerability can be...8.0 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreAn issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel through 5.6.2....4.4 Medium
- abb esomsABB eSOMS X-XSS-Protection not enabled6.3 Medium
- abb esomseSOMS X-FrameOption6.5 Medium
- abb esomseSOMS Cachecontrol (Pragma) HTTP Header6.5 Medium
- abb esomsABB eSOMS: SSL medium strength Cipher Suites5.9 Medium
- abb esomsABB eSOMS: REDIS clear text credentials6.1 Medium
- abb esomsABB eSOMS: Stored XSS vulnerability5.4 Medium
- abb esomsABB eSOMS: SQL injection vulnerability7.6 High
- abb esomsABB eSOMS: Password complexity issue6.5 Medium
- abb esomsABB eSOMS: Viewstate without MAC Signature3.5 Low
- abb esomsABB eSOMS: HTTP response information leakage4.3 Medium
- abb esomsABB eSOMS: Secure Flag not set3.5 Low
- abb esomseSOMS: X-Content-Type-Options Header Missing6.1 Medium
- abb esomsABB eSOMS: HTTPOnly flag not set5.3 Medium
- openshift enterprise openshift/apb-base, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- openshift enterprise openshift/mariadb-apb, redhat openshift +1 moreAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- ini-parser project ini-parserPrototype Pollution4.4 Medium
- apachefriends xamppAn issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on...8.8 High
- sonatype nexusSonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.8.8 High
- tp-link tl-wr841n firmwareA buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices...7.2 High
- kornshell ksh, apple mac os x, debian linux +2 moreIn ksh version 20120801, a flaw was found in the way it evaluates certain environment variables....7.4 High
- intland codebeamercodeBeamer before 9.5.0-RC3 does not properly restrict the ability to execute custom Java code...6.1 Medium
- microstrategy webMicrostrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service...5.3 Medium
- microstrategy webMicrostrategy Web 10.4 includes functionality to allow users to import files or data from...4.3 Medium
- microstrategy webMicrostrategy Web 10.4 exposes the JVM configuration, CPU architecture, installation folder, and...7.5 High
- microstrategy webThe Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator...7.2 High
- microstrategy webMicrostrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features...5.4 Medium
- cacagoo tv-288zd-2mp firmwareThe CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access...7.5 High
- cacagoo tv-288zd-2mp firmwareCACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 has weak...9.8 Critical
- ibm process federation server, automation workstream services in cloud pak for automation, cloud pak for automation +2 moreThe IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global...6.5 Medium
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site...6.1 Medium
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site...6.1 Medium
- opensuse leap, leap 15.1, texlive-filesystem +3 more +5 morerace condition on texlive-filesystem cron job allows for the deletion of unintended files6.2 Medium
- opensuse leap 15.1, texlive-filesystem, suse linux enterprise module for desktop applications 15-sp1 +2 more +4 morerace condition in the packaging of texlive-filesysten4.9 Medium
- fortinet fortiosAn external control of system vulnerability in FortiOS may allow an authenticated, regular user...8.8 High
- zevenet zen load balancerManage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute...7.2 High
- zevenet zen load balancerMonitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct...4.9 Medium
- misp-project mispapp/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that...4.9 Medium
- exim, opensuse factory +1 moreLocal privilege escalation in exim package from user mail to root8.4 High
- apport project apport, canonical ubuntu linux +1 moreApport race condition in crash report permissions5.6 Medium
- apport project apport, canonical ubuntu linux +1 moreWorld writable root owned lock file created in user controllable location6.5 Medium
- haproxy, canonical ubuntu linux, debian linux +3 more +5 moreIn hpack_dht_insert in hpack-tbl.c in the HPACK decoder in HAProxy 1.8 through 2.x before 2.1.4,...8.8 High
- mediawikiMediaWiki makeCollapsible allows applying event handler to any CSS selector5.3 Medium
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...6.1 Medium
- ui unifi videoIn UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM...7.8 High
- ui unifi videoThe UniFi Video Server (Windows) web interface configuration restore functionality at the “backup...6.5 Medium
- ui unifi videoThe UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update...8.4 High
- zoom meetingsZoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary...6.3 Medium
- zoom meetingsZoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement,...2.3 Low
- Show moreLoading…