CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....6.0 Medium
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....8.2 High
- oracle vm virtualbox, opensuse leap +1 moreVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)....6.0 Medium
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...4.6 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...7.4 High
- oracle siebel ui frameworkVulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE)....4.3 Medium
- oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...6.4 Medium
- oracle database server, oracle corporation database +1 moreVulnerability in the Java VM component of Oracle Database Server. Supported versions that are...8.0 High
- oracle database server, oracle corporation database +1 moreVulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that...2.4 Low
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.8 Critical
- oracle primavera p6 enterprise project portfolio managementVulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle...5.4 Medium
- oracle primavera p6 enterprise project portfolio managementVulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle...6.5 Medium
- oracle knowledgeVulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager...4.8 Medium
- oracle knowledgeVulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search)....5.9 Medium
- oracle knowledgeVulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager...4.3 Medium
- oracle application expressVulnerability in the Oracle Application Express component of Oracle Database Server. The...4.6 Medium
- oracle retail store inventory managementVulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail...8.8 High
- matrix42 workspace managementMatrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description...5.4 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 morePrivilege Escalation vulnerability in ENS3.9 Low
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreENS symbolic link log file manipulation vulnerability8.2 High
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 morePrivilege Escalation vulnerability through Symbolic links in ENS8.4 High
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreUnsigned executable vulnerability in ENS can be used to bypass intended self-protection rules6.6 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreBuffer overwrite in ENS allowed to bypass AMSI protection6.1 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreAutorun registry bypass6.7 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreUnquoted service paths for some McAfee ENS files4.8 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreENS elevated permissions vulnerability6.6 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreMcAfee processes not protected6.8 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreUnrestricted Policy Management using MfeUpgradeTool.exe6.4 Medium
- mcafee endpoint security, mcafee llc endpoint security (ens), mcafee, llc mcafee endpoint security (ens) +2 moreMcAfee firewall rules not enforced correctly7.4 High
- ruby-lang ruby, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim...5.3 Medium
- json project json, apple macos, debian linux +2 more +4 moreUnsafe object creation in json RubyGem7.5 High
- draytek corp. vigorap910c, draytek vigorap 910c firmware +1 moreDraytek VigorAP910C - Information Leakage7.5 High
- icatch inc. dvr firmwareiCatch DVR - Command Injection8.8 High
- icatch inc. dvr firmware, icatchinc dvr interface +1 moreiCatch DVR - Broken Access Control8.8 High
- hgiga c&cmail, oaklouds ccm\@il +1 moreHGiga C&Cmail - SQL Injection8.8 High
- hgiga c&cmail, oaklouds ccm\@il +1 moreHGiga C&Cmail - Broken Access Control9.8 Critical
- alle information co., ltd. school manage systemALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration9.8 Critical
- alle information co., ltd. school manage systemALLE INFORMATION CO., LTD. School Manage System - Path Traversal7.5 High
- alle information co., ltd. school manage systemALLE INFORMATION CO., LTD. School Manage System - SQL Injection9.8 Critical
- envoyproxy envoy, istio +1 moreIstio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection...3.1 Low
- arm mbed tls, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that...4.7 Medium
- datera, inc targetcli, targetcli-fb project targetcli-fb +1 moreA flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by...7.8 High
- fraction oasisCSRF and DNS Rebinding in Oasis4.8 Medium
- torchbox wagtailPossible XSS attack in Wagtail5.8 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in...5.5 Medium
- openexr, apple icloud, ipados +8 more +10 moreAn issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in...5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE...5.5 Medium
- openexr, apple icloud, ipados +8 more +10 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman...5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in...5.5 Medium
- openexr, apple icloud, ipados +9 more +11 moreAn issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and...5.5 Medium
- Show moreLoading…