CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- nchsoftware express invoiceNCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the...7.8 High
- cipplanner cipaceAn XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated...9.8 Critical
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...5.3 Medium
- cipplanner cipaceAn Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...5.3 Medium
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...5.3 Medium
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...7.5 High
- cipplanner cipaceA Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An...7.5 High
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker...9.8 Critical
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote...9.8 Critical
- cipplanner cipaceAn issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401. GetDistributedPOP3 allows...7.5 High
- dnnsoftware dotnetnukeThere is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in...4.3 Medium
- pulsesecure pulse connect secure, pulse policy secure +1 moreAn issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet...8.1 High
- pulsesecure pulse connect secure, pulse policy secure +1 moreAn issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet...8.8 High
- pulsesecure pulse connect secure, pulse policy secure +1 moreAn issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet...9.1 Critical
- symantec data center securitySymantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible...7.8 High
- [unknown] ceph, canonical ubuntu linux, debian linux +3 more +5 moreA flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user...5.8 Medium
- ceph, redhat ceph storage, openshift +2 more +4 moreA vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2...6.4 Medium
- ory hydraDisallow replay of `private_key_jwt` by blacklisting JTIs in Hydra5.8 Medium
- linux kernel, canonical ubuntu linux, opensuse leap +2 moreLinux kernel KVM Power8 conflicting use of HSTATE_HOST_R16.5 Medium
- qemuhw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because...5.6 Medium
- malwarebytes adwcleanerAn Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary...7.8 High
- centreonThere is Authenticated remote code execution in Centreon Infrastructure Monitoring Software...7.2 High
- projectworlds official car rental systemAn issue was discovered in Project Worlds Official Car Rental System 1. It allows the admin user...7.2 High
- projectworlds official car rental systemProject Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as...9.8 Critical
- siedle sg 150-0 firmwareThe S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, an attacker with access to the network can get root access on the gateway.6.6 Medium
- [unknown] keycloak, quarkus +1 moreImproper Restriction of Rendered UI Layers or Frames in Keycloak4.8 Medium
- dot project doteivindfjeldstad-dot contains prototype pollution vulnerability5.3 Medium
- st stm32f1 firmwareSTMicroelectronics STM32F1 devices have Incorrect Access Control.7.5 High
- confinit project confinitconfinit vulnerable to prototype pollution5.3 Medium
- class-transformer project class-transformerPrototype pollution in class-transformer5.3 Medium
- adb-driver project adb-driverOS Command Injection in adb-driver9.8 Critical
- compass-compile project compass-compileCommand Injection in compass-compile9.8 Critical
- heroku-addonpool project heroku-addonpoolOS Command Injection in heroku-addonpool9.8 Critical
- apiconnect-cli-plugins project apiconnect-cli-pluginsapiconnect-cli-plugins vulnerable to OS Command Injection9.8 Critical
- node-mpv project node-mpvOS Command Injection in node-mpv9.8 Critical
- diskusage-ng project diskusage-ngOS Command Injection in diskusage-ng9.8 Critical
- universal robots ur3, ur5 and ur10, universal-robots ur software +1 moreRVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versions7.5 High
- universal robots urx, universal-robots ur\+ +1 moreRVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot8.8 High
- universal robots robot controllers cb 2, cb3, e-series, universal-robots ur software +1 moreRVD#1443: UR dashboard server enables unauthenticated remote control of core robot functions9.4 Critical
- universal robots a/s robots robot controllers cb 3.1, robots robot controllers e-series, universal-robots ur software +2 moreRTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputs8.8 High
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the Linux kernel through 5.6.2. mpol_parse_str in mm/mempolicy.c has a...6.0 Medium
- gpacAn issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box....9.8 Critical
kernelMageia,ndiswrapperMageia,udisks2Mageia +2 more +4 moreUpdated kernel packages fix security issuesNo score- search meter project meterThe Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search...9.8 Critical
- paessler prtg network monitorPRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain...5.3 Medium
- Show moreLoading…