CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. In the Shade Locked state...2.4 Low
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.0) software....7.5 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software....7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. An attacker can disable...5.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. There is a heap-based...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. The decode...6.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP...5.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. There is a Factory Reset...9.8 Critical
- moxa sdsPrototype Pollution in sds5.3 Medium
- npm-programmatic project npm-programmaticCommand Injection in npm-programmatic9.8 Critical
- clamscan project clamscanClamscan vulnerable to command injection8.1 High
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating...9.8 Critical
- express-mock-middleware project express-mock-middlewareImproperly Controlled Modification of Dynamically-Determined Object Attributes in express-mock-middleware5.3 Medium
- fsa project fsaOS Command Injection in fsa7.8 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014_L_ESS...4.6 Medium
- solarwinds damewareClassic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause...7.5 High
aspnetcore-runtime-3.0AlmaLinux,aspnetcore-targeting-pack-3.0AlmaLinux,dotnet-apphost-pack-3.0AlmaLinux +5 more +7 more.NET Core 2.1 and 3.0 bugfix updateNo scoregcc-toolset-9-binutilsAlmaLinux,gcc-toolset-9-binutils-develAlmaLinux +1 moregcc-toolset-9-binutils bug fix updateNo score- google androidAn issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the...4.6 Medium
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets)...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets...4.6 Medium
- google androidAn issue was discovered on Samsung mobile devices with software through 2016-01-16 (Shannon333...9.1 Critical
- samsung note2 firmware, note3 firmware, s3 firmware +2 more +4 moreAn issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5...4.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with L(5.0/5.1) software. je_free in libQjpeg...7.8 High
- google androidAn issue was discovered on Samsung mobile devices with software through 2015-11-11 (supporting...4.6 Medium
- jenkins usemango runner, jenkins project usemango runner plugin +1 moreXSS vulnerability in Jenkins useMango Runner Plugin5.4 Medium
- jenkins fitnesse, jenkins project fitnesse plugin +1 moreStored XSS vulnerability in Jenkins FitNesse Plugin5.4 Medium
- jenkins awseb deployment, jenkins project awseb deployment plugin +1 moreReflected XSS vulnerability in Jenkins AWSEB Deployment Plugin6.1 Medium
- jenkins gatling, jenkins project gatling plugin +1 moreXSS vulnerability in Jenkins Gatling Plugin5.4 Medium
- jenkins code coverage api, jenkins project code coverage api plugin +1 moreXXE vulnerability in Jenkins Code Coverage API Plugin6.5 Medium
- communilink clink officeA cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management...6.1 Medium
- bitdefender high-level antimalware sdk for windows, antimalware software development kit +1 moreUntrusted Search Path Vulnerability in High-Level Antimalware SDK6.3 Medium
- mozilla firefoxMozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers and community members Tyson Smith and Christian Holler reported memory safety...9.8 Critical
- mozilla firefoxInitially, a user opens a Private Browsing Window and generates a password for a site, then...2.8 Low
- mozilla firefoxA malicious extension could have called <code>browser.identity.launchWebAuthFlow</code>,...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreOn 32-bit builds, an out of bounds write could have occurred when processing an image larger than...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen reading from areas partially or fully outside the source resource with WebGL's <code...7.5 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.162 allowed a remote...8.8 High
- google chrome, fedoraproject fedora, opensuse backports +1 more +3 moreHeap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker...8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...8.8 High
- google chrome, fedoraproject fedora, opensuse backports sle +1 more +3 moreUse after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to...8.8 High
- Show moreLoading…