CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. Telecom has a...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. A crafted AT...6.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. There...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets)...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. An attacker...4.6 Medium
- amcrest 1080-lite 8ch firmware, amdv10814-h5 firmware, cameras and network video recorder (nvr) +16 more +18 moreAmcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An...8.8 High
- amcrest 1080-lite 8ch firmware, amdv10814-h5 firmware, ip2m-841-v3 firmware +15 more +17 moreAmcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. An...6.5 Medium
- plat'home co.,ltd. easyblocks ipv6, plathome easyblocks ipv6 enterprise firmware, easyblocks ipv6 firmware +2 moreSession fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0...8.1 High
- plat'home co.,ltd. easyblocks ipv6, plathome easyblocks ipv6 enterprise firmware, easyblocks ipv6 firmware +2 moreCross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and...8.8 High
- canonical microk8sMicrok8s Privilege Escalation Vulnerability8.8 High
- hms-networks ewon cosy firmware, ewon flexy firmware +1 moreA non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all...6.1 Medium
- varnish-cache varnish cache, debian linux, opensuse backports sle +1 more +3 moreAn issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3...7.5 High
- logicaldocLogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than...7.5 High
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. Two Cross Side Scripting...6.1 Medium
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. A Cross Site Request...8.8 High
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. It is intended to...5.3 Medium
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. The External Command...7.2 High
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. In several sections of...9.8 Critical
- primekey ejbcaAn issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. An error state can be...6.5 Medium
- opsramp gatewayOpsRamp Gateway 3.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root...9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 morejackson-databind mishandles the interaction between serialization gadgets and typing8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typing8.1 High
- fortinet fortiadc, fortiadc firmware +1 moreAn improper authorization vulnerability in FortiADC may allow a remote authenticated user with...6.5 Medium
- wpleadplus wp lead plus xAn XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote...6.1 Medium
- wpleadplus wp lead plus xAn XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in...5.4 Medium
- fortinet fortiadc, fortiadc firmware +1 moreAn improper neutralization of input vulnerability in the dashboard of FortiADC may allow an...5.4 Medium
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in Netty7.5 High
- convert\ \, fedoraproject fedora +1 moreperl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to...7.5 High
- cross domain local storage project domain local storageImproper Input Validation in xdLocalStorage7.1 High
- cross domain local storage project domain local storagexdlocalstorage does not verify request origin8.8 High
- cross domain local storage project domain local storageOpen Redirect in xdLocalStorage6.1 Medium
- cross domain local storage project domain local storageImproper Input Validation in xdLocalStorage7.1 High
- fortinet fortianalyzer, fortiap-s, fortimanager +2 more +4 moreAn Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6...7.5 High
- honeywell notifier webserverHoneywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which...9.8 Critical
- ge mark vie controll systemGE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root...7.8 High
- ge mark vie control systemGE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an...8.8 High
- contact-form-7-datepicker project contact-form-7-datepickerStored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows...5.4 Medium
- rankmath seoThe Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to...6.1 Medium
- rankmath seoThe Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to...9.8 Critical
- idxbroker impress for idx brokerAn issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. wrappers...6.5 Medium
- idxbroker impress for idx brokerStored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated...5.4 Medium
- linux kernel, canonical ubuntu linux +1 moreAn issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media...4.3 Medium
- google androidAn issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. The TA Scrypto...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x)...9.1 Critical
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) software. An attacker can boot a...7.2 High
- google androidAn issue was discovered on Samsung mobile devices with N(7.x) software. There is a...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. There is an...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. SVoice allows...9.8 Critical
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x)...4.3 Medium
- Show moreLoading…