CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- trianglemicroworks scada data gatewayTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122...7.5 High
- trianglemicroworks scada data gatewayTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122...7.5 High
- z-cronZ-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a...9.8 Critical
- dell emc integrated data protection appliance, integrated data protection appliance +1 moreDell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command...7.9 High
- dell rsa authentication managerRSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting...4.8 Medium
- netgear r8900 firmware, r9000 firmware, xr500 firmware +1 more +3 moreCertain NETGEAR devices are affected by denial of service. This affects R8900 before 1.0.5.2,...5.3 Medium
- netgear mr1100 firmwareNETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information.6.9 Medium
- netgear rn42400 firmwareNETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings.4.6 Medium
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.6.8 Medium
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.9.8 Critical
- vmware vrealize log insightCross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due...4.8 Medium
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.4.2 Medium
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.4.2 Medium
- vmware vrealize log insightOpen Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper...6.1 Medium
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.7.7 High
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.9.0 Critical
- netgear rax40 firmwareNETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.8.8 High
- netgear d3600 firmware, d6000 firmware, d6200 firmware +14 more +16 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear rbk50 firmware, rbr50 firmware, rbs50 firmware +2 moreCertain NETGEAR devices are affected by stored XSS. This affects RBR50 before 2.3.5.30, RBS50...6.0 Medium
- netgear mr1100 firmwareNETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.7.0 High
- netgear r8900 firmware, r9000 firmware, rax120 firmware +1 more +3 moreNETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer...7.5 High
- netgear jgs516pe firmwareNETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS.5.2 Medium
- netgear r7800 firmwareNETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated...9.4 Critical
- netgear r6400 firmware, r6700 firmware, r6900 firmware +1 more +3 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.3 High
- netgear d6200 firmware, d7000 firmware, jr6150 firmware +9 more +11 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00...6.5 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +14 more +16 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +8 more +10 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
- intel compute stick stck1a32wfc firmware, intel(r) nuc firmware, nuc 7 essential pc nuc7cjysal firmware +8 more +10 moreImproper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to...7.8 High
- intel binary configuration toolUncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows,...7.8 High
- intel compute module mfs2600ki firmwareInsufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an...8.8 High
- intel compute module mfs2600ki firmwareBuffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an...6.5 Medium
- intel compute module mfs2600ki firmwareImproper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an...8.8 High
- intel driver \& support assistantRace condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an...4.7 Medium
- intel proset\/wireless wifi, intel corporation intel(r) proset/wireless wifi software +1 moreImproper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products...6.5 Medium
- intel proset\/wireless wifi, intel corporation intel(r) proset/wireless wifi software +1 moreInsecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on...7.8 High
- intel data migration, intel corporation intel(r) data migration software +1 moreIncorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3...7.8 High
- eaton hmisoft vu3 firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU...7.8 High
- eaton hmisoft vu3 firmwareEaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU...5.5 Medium
- ge cimplicityA local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI...6.7 Medium
- matrix42 workspace managementThe Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2...5.4 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +8 more +10 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +8 more +10 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.56, R7500v2...6.0 Medium
drupal/jsonapiPackagistThis module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The security team and module maintainers are marking this project unsu…No score- davical andrew\'s web libraries, debian linux +1 moreAn issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Session management...7.5 High
- davical andrew\'s web libraries, debian linux +1 moreAn issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. Long-term session...9.8 Critical
- sierrawireless mobile broadband driver packageThe Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an...7.8 High
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may...6.3 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform...5.4 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A...5.5 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted...6.3 Medium
- Show moreLoading…