CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- ui cloud key gen2, cloud key gen2 plus +1 moreUniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to...5.3 Medium
- davidlingren media library assistantThe Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS...6.1 Medium
- davidlingren media library assistantThe Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion...7.5 High
- libvirtA NULL pointer dereference was found in the libvirt API responsible introduced in upstream...6.5 Medium
- qemuA flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for...5.5 Medium
- linux kernelsnd_ctl_elem_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info-...7.8 High
- openresty, debian linux +1 moreAn issue was discovered in OpenResty before 1.15.8.4. ngx_http_lua_subrequest.c allows HTTP...7.5 High
- dungeon crawl stone soup project crawl stone soupDungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute...9.8 Critical
- saitoha libsixelload_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an...6.5 Medium
- etentech psg-6528vm firmwareeten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.5.4 Medium
- wolfsslwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing...7.5 High
- open upload project uploadOpen Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.6.1 Medium
- konghq docker-kongAn issue was discovered in docker-kong (for Kong) through 2.0.3. The admin API port may be...9.8 Critical
- yhirose cpp-httplibcpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and...7.5 High
permissionsopenSUSESecurity update for permissionsNo score- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User...8.8 High
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has...6.1 Medium
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax...7.5 High
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface...6.1 Medium
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate...9.8 Critical
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows...8.8 High
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce...8.8 High
- provideserver provide ftp serverAn issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can...9.8 Critical
- google flatbuffersDangling reference in flatbuffers7.5 High
- jetbrains pycharmIn JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were...7.5 High
- wireshark, debian linux, opensuse leap +2 moreIn Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could...7.5 High
- dell pc5500 firmware, powerconnect, r1-2210 firmware +3 more +5 moreDell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500...8.1 High
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06...4.8 Medium
- pivotal vmware tanzu application service for vms, vmware tanzu application service for vms +1 morePCF Autoscaling logs its database credentials6.5 Medium
- google androidAn issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because...7.5 High
- google androidAn issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the...9.8 Critical
- periscope holdings buyspeedPeriscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting3.9 Low
- dropwizard, dropwizard validation +1 moreRemote Code Execution (RCE) vulnerability in dropwizard-validation8.0 High
- tendermintDenial of service in Tendermint3.1 Low
- google androidAn issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05...9.8 Critical
- dlink dsl-gs225 firmwareD-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell...7.2 High
- linux kernel, opensuse leap, redhat enterprise linux +2 moreAn issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc...5.5 Medium
- huawei mate 30 firmware, mate 30 pro firmware +1 moreThere is an improper authentication vulnerability in several smartphones. Certain function...5.5 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege...7.5 High
- huawei osca-550 firmware, osca-550a firmware, osca-550ax firmware +1 more +3 moreThere is an insufficient integrity validation vulnerability in several products. The device does...4.6 Medium
- vmware vcenter serverUnder certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or...9.8 Critical
- canonical extplorereXtplorer exposes /usr and /etc/extplorer over HTTP5.8 Medium
- broadcom advanced secure gateway, symantec proxysg, symantec corporation advanced secure gateway (asg) and proxysg +2 moreThe ASG and ProxySG management consoles are susceptible to a session hijacking vulnerability. A...6.5 Medium
- symantec management centerA CSRF token disclosure vulnerability allows a remote attacker, with access to an authenticated...5.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Crafted packets traversing a Broadband Network Gateway (BNG) configured with IPv6 NDP proxy could lead to Denial of Service7.4 High
- linux kernelIn the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera...7.1 High
- avira free antivirusAn issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection...9.8 Critical
- mongodb enterprise kubernetes operatorKubernetes Operator generates potentially insecure certificates6.4 Medium
- facebook instagram, instagram for android +1 moreA large heap overflow could occur in Instagram for Android when attempting to upload an image...7.8 High
- argoproj argo cdArgo Exposure of Sensitive Information6.5 Medium
- Show moreLoading…