CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- netgear jndr3000 firmware, r6250 firmware, r6300 firmware +16 more +18 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.1 High
- netgear d6400 firmware, d7000 firmware, d7800 firmware +35 more +37 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.3 Medium
- netgear d6100 firmware, r7800 firmware, r8900 firmware +6 more +8 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- dolibarr erp\/crmDolibarr Cross-Site Request Forgery Vulnerability8.8 High
- netgear d3600 firmware, d6000 firmware, d6100 firmware +8 more +10 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +8 more +10 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +16 more +18 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- hpe opencall media platformPotential security vulnerabilities have been identified in HPE OpenCall Media Platform (OCMP)...6.9 Medium
- appinghouse memonoUsers can lock their notes with a password in Memono version 3.8. Thus, users needs to know a...7.5 High
- dolibarr erp\/crmDolibarr stored Cross-site Scripting vulnerability5.4 Medium
- shopizerNegative charge in shopping cart possible in Shopizer6.5 Medium
- northern.tech cfengineNorthern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3...6.1 Medium
- rukovoditelIn Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a...9.8 Critical
- rukovoditelRukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of...9.8 Critical
- aviatrix openvpnThe Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL...9.8 Critical
- rukovoditelIn Rukovoditel 2.5.2 has a form_session_token value to prevent CSRF attacks. This protection...8.8 High
- netgear d3600 firmware, d6000 firmware, d6100 firmware +18 more +20 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d7800 firmware, dm200 firmware, r7500 firmware +14 more +16 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- rukovoditelIn Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the...9.8 Critical
- arista eosAn issue was found in Arista EOS. Specific malformed ARP packets can impact the software...7.5 High
- rukovoditelRukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of...9.8 Critical
- qdpmA Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular...5.4 Medium
- rukovoditelRukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of...9.8 Critical
- rukovoditelIn Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the...5.4 Medium
- qdpmIn qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add...9.8 Critical
- apache heronDeserialization of Untrusted Data in Apache Heron9.8 Critical
- netgear d7800 firmware, ex2700 firmware, ex6100 firmware +16 more +18 moreCertain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX2700...4.8 Medium
- arubanetworks clearpass, aruba clearpass policy manager +1 moreClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or...4.8 Medium
- arubanetworks clearpass, aruba clearpass policy manager +1 moreA vulnerability was found when an attacker, while communicating with the ClearPass management...4.9 Medium
- arubanetworks clearpass, aruba clearpass policy manager +1 moreA server side injection vulnerability exists which could allow an authenticated administrative...7.2 High
- arubanetworks clearpass, aruba clearpass policy manager +1 moreA vulnerability exists allowing attackers, when present in the same network segment as ClearPass'...9.8 Critical
- netgear d3600 firmware, d6000 firmware, d7800 firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000...4.8 Medium
- netgear d6220 firmware, d6400 firmware, d7000 firmware +12 more +14 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.8 Medium
- netgear d6220 firmware, d6400 firmware, d7000 firmware +11 more +13 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d3600 firmware, d6000 firmware, d7800 firmware +20 more +22 moreCertain NETGEAR devices are affected by denial of service. This affects D3600 before 1.0.0.75,...4.3 Medium
- netgear dgn2200 firmware, dgnd2200b firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.76, D6000...4.8 Medium
- netgear d3600 firmware, d6000 firmware, d7800 firmware +17 more +19 moreCertain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000...4.8 Medium
- netgear d8500 firmware, r6250 firmware, r6300 firmware +14 more +16 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d6220 firmware, d6400 firmware, d7000 firmware +21 more +23 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.8 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.3, 11.5, and 11.7 could be subject to attacks based on...7.3 High
- ibm mqIBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of...5.1 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.5 could allow a user with special permissions to obtain sensitive...3.1 Low
- ibm mqIBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel...5.9 Medium
- netgear d3600 firmware, d6000 firmware, xr500 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.1 High
- netgear d3600 firmware, d6000 firmware, xr500 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.1 High
- netgear d3600 firmware, d6000 firmware, xr500 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.1 High
- netgear d3600 firmware, d6000 firmware, xr500 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...7.1 High
- netgear r7800 firmware, xr500 firmware +1 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.8 High
- netgear r7800 firmware, xr500 firmware +1 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...8.8 High
- Show moreLoading…