CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in...5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the...5.5 Medium
- sepppenner windowshelloInternal NCryptDecrypt method could be used externally from WindowsHello library.5.1 Medium
- lenovo vantageA privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System...7.3 High
- lenovo lenovoappscenariopluginsystem for lenovo system interface foundation, system interface foundation +1 moreA vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface...5.0 Medium
- lenovo system interface foundationA privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to...7.3 High
- lenovo lenovosystemupdateplugin for lenovo system interface foundation, system interface foundation +1 moreA privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo...7.3 High
- lenovo vantageA vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an...4.4 Medium
- cellebrite ufed firmwareCellebrite UFED 5.0 through 7.29 uses four hardcoded RSA private keys to authenticate to the ADB...5.5 Medium
- subex roc partner settlementAn Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex...8.8 High
- siemens climatix pol908 (bacnet/ip module), climatix pol909 (awm module), climatix pol908 firmware +1 more +3 moreA vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions),...6.1 Medium
- siemens climatix pol908 (bacnet/ip module), climatix pol909 (awm module), climatix pol908 firmware +1 more +3 moreA vulnerability has been identified in Climatix POL908 (BACnet/IP module) (All versions),...6.1 Medium
- siemens scalance x200-4p irt, scalance x201-3p irt, scalance x201-3p irt pro +100 more +102 moreA vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) ...7.5 High
- siemens tim 3v-ie (incl. siplus net variants), tim 3v-ie advanced (incl. siplus net variants), tim 3v-ie dnp3 (incl. siplus net variants) +7 more +9 moreA vulnerability has been identified in TIM 3V-IE (incl. SIPLUS NET variants) (All versions < V2.8...9.8 Critical
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (AdminTools), versions 4.1, 4.2, allows an...6.1 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application it05) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730,...6.1 Medium
- sap netweaver knowledge management and collaboration \(kmc-cm\), netweaver knowledge management and collaboration \(kmc-wpc\), sap se netweaver (knowledge management) (kmc-cm) +1 more +3 moreSAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50...9.1 Critical
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMC), version 4.1, 4.2, shows cleartext...6.4 Medium
- andyroid andy osAn issue was discovered in AndyOS Andy versions up to 46.11.113. By default, it starts telnet and...7.8 High
- ecobee ecobee4 firmwareEcobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi...7.5 High
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions - 6.6, 6.7, 1808, 1811, 1905, does not process XML input securely in the...9.3 Critical
- sap adaptive extensions, landscape management +1 moreSAP Landscape Management, version 3.0, and SAP Adaptive Extensions, version 1.0, allows an...7.2 High
- sap host agentSAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation...7.2 High
- sap se commerce, sap commerce cloud +1 moreSAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an...5.3 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreUnder certain conditions, SAP Business Objects Business Intelligence Platform, version 4.1, 4.2,...7.5 High
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 7.2, does not perform the authentication check...8.6 High
- sap banking services from sap, s\/4hana financial products subledger, sap se s/4 hana (financial products subledger and banking services) (fsappl) +1 more +3 moreSAP S/4 HANA (Financial Products Subledger and Banking Services), versions - FSAPPL 400, 450, 500...4.3 Medium
- sap orientdbSAP OrientDB, version 3.0, allows an authenticated attacker with script execute/write permissions...9.1 Critical
- sap se business objects business intelligence platform (web intelligence html interface), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4...5.4 Medium
- sap se business objects business intelligence platform (web intelligence html interface), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), version 4...5.4 Medium
- sap business clientSAP Business Client, versions 6.5, 7.0, does not perform necessary integrity checks which could...5.3 Medium
- sap se netweaver as java (http service), sap netweaver application server java +1 moreSAP NetWeaver AS Java (HTTP Service), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows...4.5 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages application crm bsp frame) +1 moreSAP NetWeaver AS ABAP (Business Server Pages application CRM_BSP_FRAME), versions 700, 701, 702,...6.1 Medium
- sap se business objects business intelligence platform (cms / auditing issues), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (CMS / Auditing issues), version 4.2, allows...5.3 Medium
- sap se crystal reports for vs, business objects business intelligence platform (crystalreports webform viewer), sap businessobjects business intelligence platform +1 more +3 moreSAP Business Objects Business Intelligence Platform (CrystalReports WebForm Viewer), versions 4.1...9.1 Critical
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (web intelligence html interface) +1 moreSAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface), versions 4...5.4 Medium
- sap se business objects business intelligence platform (bi launchpad), sap businessobjects business intelligence platform +1 moreSAP Business Objects Business Intelligence Platform (BI Launchpad), version 4.2, does not...6.1 Medium
- sap businessobjects business intelligence platformWeb Intelligence HTML interface in SAP Business Objects Business Intelligence Platform, versions...5.4 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreThe open document of SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2,...6.1 Medium
- sap se business objects business intelligence platform, sap businessobjects business intelligence platform +1 moreAdmin tools and Query Builder in SAP Business Objects Business Intelligence Platform, versions 4...5.0 Medium
- sap se s/4hana (financial products subledger), sap s\/4hana +1 moreSAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object...4.7 Medium
- eleveo call recordingA privilege escalation vulnerability in ZOOM Call Recording 6.3.1 allows its user account (i.e.,...8.8 High
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all...7.8 High
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all...9.8 Critical
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all...8.8 High
- mbconnectline mbconnect24, mymbconnect24 +1 moreAn issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all...5.3 Medium
- s3india husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior,...5.3 Medium
- mysyngeryss husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior,...5.3 Medium
- mysyngeryss husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior,...8.2 High
- mysyngeryss husky rtu 6049-e70 firmwareThe Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior,...9.8 Critical
- Show moreLoading…