CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- auth0 auth0.jsInformation disclosure through error object5.5 Medium
gnuhealthopenSUSESecurity update for gnuhealthNo score- dahuasecurity ipc-hx2xxx firmware, ipc-hx5842h firmware, ipc-hx7842h firmware +16 more +18 moreSome products of Dahua have Denial of Service vulnerabilities. After the successful login of the...4.9 Medium
- dahuasecurity ipc-hx2xxx firmware, ipc-hx5842h firmware, ipc-hx7842h firmware +16 more +18 moreSome Dahua products have buffer overflow vulnerabilities. After the successful login of the legal...7.2 High
- advantech webaccess/nms, webaccess\/nms +1 moreAn attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's ...9.1 Critical
- advantech webaccess/nms, webaccess\/nms +1 moreWebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input...7.5 High
- advantech webaccess/nms, webaccess\/nms +1 moreWebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an...8.8 High
- advantech webaccess/nms, webaccess\/nms +1 moreAn attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's...9.8 Critical
- advantech webaccess/nms, webaccess\/nms +1 moreWebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new...9.8 Critical
- advantech webaccess/nms, webaccess\/nms +1 moreThere are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS ...7.5 High
- advantech webaccess/nms, webaccess\/nms +1 moreMultiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on...6.5 Medium
- advantech webaccess/nms, webaccess\/nms +1 moreMultiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions...9.8 Critical
- tencent qqbrowserQQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by...7.8 High
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is...8.8 High
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote...7.5 High
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote...7.5 High
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are...5.4 Medium
- castlerock snmpc onlineAn issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the...7.5 High
- generic-array project generic-arrayUse after free in generic-array7.5 High
- mozilla firefox esrA malicious Android application could craft an Intent that would have been processed by Firefox...7.5 High
- mozilla firefox esrWhen following a link that opened an intent://-schemed URL, causing a custom tab to be opened,...4.7 Medium
permissionsSUSESecurity update for permissionsNo score- libssh, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreA flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ...5.3 Medium
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...9.8 Critical
- varnish-cache varnish cache, opensuse backports sle, leap +2 moreAn issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3...7.5 High
- ixsystems freenas firmware, truenas firmware +1 moreAn issue was discovered in iXsystems FreeNAS 11.2 and 11.3 before 11.3-U1. It allows a denial of...7.5 High
- facebook oculus desktop, oculus desktop +1 moreWriting to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1...7.8 High
- argoproj argo cdArgo CD Insecure default administrative password8.8 High
- argoproj argo cdImproper Restriction of Excessive Authentication Attempts in Argo API7.5 High
- argoproj argo cdAs of v1.5.0, the Argo web interface authentication system issued immutable tokens....7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.7.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability7.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.5.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: vMX and MX150: Denial of Service vulnerability in packet processing7.5 High
- juniper junos os evolvedJunos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets7.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Kernel memory leak in virtual-memory due to interface flaps6.5 Medium
- juniper junos os evolvedJunos OS Evolved: objmon logs may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: ev.ops file may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: EvoSharedObjStore may leak sensitive information5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Configd leaks hashes via stream and is world readable5.5 Medium
- juniper junos os evolvedJunos OS Evolved: Configd leaks hashes via log file and is world readable5.5 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.6.0 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: EX and QFX Series: Console port authentication bypass vulnerability6.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.7.5 High
- juniper networks jatp, juniper advanced threat protection, virtual advanced threat protection +2 moreJATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.5.3 Medium
- Show moreLoading…