Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
April

CVEs published in April 2020

2,302 vulnerabilities, 307 critical, 16 exploited.

Known exploitedIn KEVPublic exploitFix available

oneplus 7 pro firmwareAn issue was discovered on OnePlus 7 Pro devices before 10.0.3.GM21BA. The firmware was found to...CVE-2020-79586.0 MediumApril 14, 2020
ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized...CVE-2020-41516.5 MediumApril 14, 2020
wowza streaming engineA remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.7.8 (build...CVE-2020-90048.8 HighApril 14, 2020
octech oemproOctech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName...CVE-2020-9461Public exploit5.4 MediumApril 14, 2020
octech oemproOctech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in...CVE-2020-9460Public exploit5.4 MediumApril 14, 2020
grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreGrandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote...CVE-2020-57398.8 HighApril 14, 2020
grandstream gxp1610 firmware, gxp1615 firmware, gxp1620 firmware +3 more +5 moreGrandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote...CVE-2020-57388.8 HighApril 14, 2020
xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11743Fix available5.5 MediumApril 14, 2020
xen, fedoraproject fedora +1 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11742Fix available5.5 MediumApril 14, 2020
xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active...CVE-2020-11741Fix available8.8 HighApril 14, 2020
xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without...CVE-2020-11740Fix available5.5 MediumApril 14, 2020
xen, debian linux, fedoraproject fedora +1 more +3 moreAn issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of...CVE-2020-11739Fix available7.8 HighApril 14, 2020
canonical c-kernel, pc-kernel +1 moreUbuntu kernel snap build process could use unauthenticated sourcesCVE-2019-114808.4 HighApril 14, 2020
sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application it00) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730,...CVE-2020-62156.1 MediumApril 14, 2020
git, canonical ubuntu linux, debian linux +2 more +4 moremalicious URLs may cause Git to present stored credentials to the wrong serverCVE-2020-5260Public exploitFix availableEPSS 14.9%9.3 CriticalApril 14, 2020
siemens development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p, ktk ate530s +96 more +98 moreA vulnerability has been identified in KTK ATE530S (All versions), SIDOOR ATD430W (All versions),...CVE-2019-193007.5 HighApril 14, 2020
awesomemotive duplicator, wordpress snap creek duplicator plugin +1 moreThe Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1)...CVE-2020-11738In KEVPublic exploitEPSS 97.8%7.5 HighApril 13, 2020
rockwellautomation rslinx classicIn Rockwell Automation RSLinx Classic versions 4.1.00 and prior, an authenticated local attacker...CVE-2020-106427.8 HighApril 13, 2020
fujielectric v-serverFuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow....CVE-2020-106467.8 HighApril 13, 2020
gnome file-roller, canonical ubuntu linux, debian linux +2 morefr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during...CVE-2020-11736Fix available3.9 LowApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92...CVE-2020-6456Fix available6.5 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreOut of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6455Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who...CVE-2020-6454Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6448Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6447Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6446Fix available6.5 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6445Fix available6.5 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6444Fix available6.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6443Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6442Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6441Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an...CVE-2020-6440Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6439Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an...CVE-2020-6438Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6437Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote...CVE-2020-6436Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6435Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6434Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6433Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6432Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreInsufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a...CVE-2020-6431Fix available4.3 MediumApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreType Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6430Fix available8.8 HighApril 13, 2020
google chrome, debian linux, fedoraproject fedora +2 more +4 moreUse after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to...CVE-2020-6423Fix available8.8 HighApril 13, 2020
cisco webex business suite, webex business suite 39 +1 moreCisco Webex Business Suite Host Header Value Integrity VulnerabilityCVE-2019-18663.1 LowApril 13, 2020
cisco webex meetings multimedia viewer, webex meetings server +1 moreCisco Webex Meetings Multimedia Viewer VulnerabilityCVE-2020-31263.0 LowApril 13, 2020
cypress wiced studioAn issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1...CVE-2019-139168.8 HighApril 13, 2020
cybersolutions cybermailcgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.CVE-2020-117346.1 MediumApril 13, 2020
stormshield network securityStormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect...CVE-2020-84306.1 MediumApril 13, 2020
total-soft responsive pollAn issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an...CVE-2020-116739.8 CriticalApril 13, 2020
rubrik cdmAn issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an...CVE-2020-94788.8 HighApril 13, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open