CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- google androidIn get_auth_result of the FPC IRIS TrustZone app, there is a possible out of bounds write due to...6.7 Medium
- google androidThere is a possible disclosure of RAM using a shared crypto key due to improperly used crypto....5.5 Medium
- google androidIn rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to...9.8 Critical
- google androidIn rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc, there is a possible out of bounds write due to...9.8 Critical
- google androidIn rw_t2t_extract_default_locks_info of rw_t2t_ndef.cc, there is a possible out of bounds write...9.8 Critical
- google androidIn rw_t2t_update_lock_attributes of rw_t2t_ndef.cc, there is a possible out of bounds write due...9.8 Critical
- google androidIn decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer....7.8 High
- google androidIn releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a missing...7.8 High
- google androidIn ExternalVibration of ExternalVibration.java, there is a possible activation of an arbitrary...7.8 High
- google android, fedoraproject fedora +1 moreIn finalize of AssetManager.java, there is possible memory corruption due to a double free. This...7.8 High
- google androidIn onOpActiveChanged and related methods of AppOpsControllerImpl.java, there is a possible way to...7.8 High
- google androidIn crus_afe_get_param of msm-cirrus-playback.c, there is a possible out of bounds read due to an...4.4 Medium
- google android, canonical ubuntu linux +1 moreIn f2fs_xattr_generic_list of xattr.c, there is a possible out of bounds read due to a missing...4.4 Medium
- autodesk dynamo bimAn improper signature validation vulnerability in Autodesk Dynamo BIM versions 2.5.1 and 2.5.0...7.8 High
- autodesk fbx software development kitA heap overflow vulnerability in the Autodesk FBX-SDK versions 2019.2 and earlier may lead to...7.8 High
- autodesk fbx software development kitA NULL pointer dereference vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may...5.5 Medium
- autodesk fbx software development kitAn intager overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...6.5 Medium
- autodesk fbx software development kitA use-after-free vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...8.8 High
- autodesk fbx software development kitA type confusion vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...8.8 High
- autodesk fbx software development kitA buffer overflow vulnerability in the Autodesk FBX-SDK versions 2019.0 and earlier may lead to...7.8 High
- apple ios, macos, tvos +2 more +4 moreA logic issue was addressed with improved state management. This issue is fixed in iOS 12.2,...9.8 Critical
- gnome evolutionAn issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068)...6.5 Medium
- kde kmailAn issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) ...6.5 Medium
- jitsi meetThe Jitsi Meet (aka docker-jitsi-meet) stack on Docker before stable-4384-1 uses default...9.8 Critical
- zoom meetingsairhost.exe in Zoom Client for Meetings 4.6.11 uses the SHA-256 hash of 0123425234234fsdfsdr3242...7.5 High
- zoom meetingsairhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the Initialization Vector...7.5 High
- microfocus enterprise developer, enterprise server +1 moreInsufficiently protected credentials vulnerability on Micro Focus enterprise developer and...8.8 High
- hpe msa 1040 firmware, msa 1050 firmware, msa 2040 firmware +3 more +5 moreA remote session reuse vulnerability leading to access restriction bypass was discovered in HPE...9.8 Critical
- hpe msa 1040 firmware, msa 1050 firmware, msa 2040 firmware +3 more +5 moreA remote session reuse vulnerability leading to access restriction bypass was discovered in HPE...6.4 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG...6.8 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (MTK...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 (North...9.1 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 9.0 (Qualcomm SDM450, SDM845, SM6150...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...5.5 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...7.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0...9.8 Critical
- google androidAn issue was discovered on LG mobile devices with Android OS 9.0 software. The HAL service has a...7.8 High
- lg pc suiteAn issue was discovered in LG PC Suite for LG G3 and earlier (aka LG PC Suite v5.3.27 and earlier...7.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK...7.8 High
- ibm tririga application platformIBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error...5.3 Medium
- ibm maximo asset management, control desk, maximo asset configuration manager +17 more +19 moreIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm maximo asset management, control desk, maximo asset configuration manager +17 more +19 moreIBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm maximo asset management, control desk, maximo asset configuration manager +16 more +18 moreIBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not...5.4 Medium
- google androidAn issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9, and 10 software....7.5 High
- Show moreLoading…