Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2020
April

CVEs published in April 2020

2,302 vulnerabilities, 307 critical, 16 exploited.

Known exploitedIn KEVPublic exploitFix available

netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188275.2 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188285.2 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G...CVE-2017-188297.8 HighApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G...CVE-2017-188307.8 HighApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188317.8 HighApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188325.2 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188336.1 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188346.1 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by reflected XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188356.1 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2...CVE-2017-188366.2 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G...CVE-2017-188377.8 HighApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by privilege escalation. This affects M4300-28G before 12.0...CVE-2017-188387.8 HighApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...CVE-2017-188395.2 MediumApril 20, 2020
netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by denial of service. This affects M4300-28G before 12.0.2...CVE-2017-188406.2 MediumApril 20, 2020
netgear d7000 firmware, r6220 firmware, r6700 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.46,...CVE-2017-188416.7 MediumApril 20, 2020
python-markdown2 project python-markdown2XSS in python-markdown2CVE-2020-11888Fix available6.1 MediumApril 20, 2020
netgear d2200d firmware, d2200dw-1frnas firmware, dgn2200 firmware +2 more +4 moreCertain NETGEAR devices are affected by CSRF. This affects R7300 before 1.0.0.54, R8500 before 1...CVE-2017-188428.8 HighApril 20, 2020
netgear d7000 firmware, r6700 firmware, r6800 firmware +2 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...CVE-2017-188438.4 HighApril 20, 2020
netgear d7000 firmware, r6700 firmware, r6800 firmware +2 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...CVE-2017-188448.4 HighApril 20, 2020
netgear r6700 firmware, r6800 firmware +1 moreCertain NETGEAR devices are affected by disclosure of administrative credentials. This affects...CVE-2017-188458.4 HighApril 20, 2020
netgear d8500 firmware, r6250 firmware, r6400 firmware +5 more +7 moreCertain NETGEAR devices are affected by a stack-based buffer overflow. This affects R6250 before...CVE-2017-188466.7 MediumApril 20, 2020
netgear d8500 firmware, r6400 firmware, r6900p firmware +4 more +6 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...CVE-2017-188476.2 MediumApril 20, 2020
netgear ac1450 firmware, r6300 firmware, r7300 firmware +1 more +3 moreCertain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.0.36, AC1450 before...CVE-2017-188488.8 HighApril 20, 2020
netgear d6220 firmware, d6400 firmware, d8500 firmware +13 more +15 moreCertain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.26,...CVE-2017-188498.4 HighApril 20, 2020
php, debian linux, oracle communications diameter signaling router +1 more +3 moreOOB Read in urldecode()CVE-2020-7067Fix available7.5 HighApril 20, 2020
netgear d6220 firmware, d6400 firmware, d8500 firmware +13 more +15 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.26...CVE-2017-188508.4 HighApril 20, 2020
netgear d8500 firmware, r6100 firmware, r6400 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...CVE-2017-188516.7 MediumApril 20, 2020
netgear r7300dst firmware, r8300 firmware, r8500 firmware +1 more +3 moreCertain NETGEAR devices are affected by CSRF and authentication bypass. This affects R7300DST...CVE-2017-188528.4 HighApril 20, 2020
toshiba electronic devices & storage corporation hdd password tool (for windows), toshiba password tool for windows +1 moreAn unquoted search path vulnerability exists HDD Password tool (for Windows) in version 1.20.6620...CVE-2020-55698.4 HighApril 20, 2020
google chrome, debian linux +1 moreUse after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote...CVE-2020-6457Fix available9.6 CriticalApril 20, 2020
gtranslate translate wordpress with gtranslateThe GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This...CVE-2020-119306.1 MediumApril 20, 2020
git, canonical ubuntu linux, debian linux +1 more +3 moreMalicious URLs can still cause Git to send a stored credential to the wrong serverCVE-2020-11008Fix available4.0 MediumApril 20, 2020
davidlingren media library assistantIn the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur...CVE-2020-119289.8 CriticalApril 19, 2020
pion dtlsImproper Authenication in Pion DTLSCVE-2019-20786Fix available9.8 CriticalApril 19, 2020
libmingMing (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF(...CVE-2020-118949.1 CriticalApril 19, 2020
libmingMing (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF(...CVE-2020-118959.1 CriticalApril 19, 2020
stb_truetype crates.io`stb_truetype` crate has been deprecated; use `ttf-parser` insteadRUSTSEC-2020-0020No scoreApril 18, 2020
svg2png project svg2pngXSS in svg2png (NPM package)CVE-2020-118876.1 MediumApril 17, 2020
opennms horizon, meridian +1 moreOpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the...CVE-2020-118868.1 HighApril 17, 2020
wso2 enterprise integratorWSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin...CVE-2020-118854.0 MediumApril 17, 2020
divante storefront-api, vue-storefront-api +1 moreDiavante vue-storefront-api and storefront-api disclose stack traceCVE-2020-11883Public exploitFix availableEPSS 15.2%5.3 MediumApril 17, 2020
openmrsIn OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross...CVE-2020-57316.1 MediumApril 17, 2020
openmrsIn OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross...CVE-2020-57306.1 MediumApril 17, 2020
openmrsIn OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input...CVE-2020-57296.1 MediumApril 17, 2020
openmrsOpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl"...CVE-2020-57286.1 MediumApril 17, 2020
openmrsIn OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly...CVE-2020-57336.1 MediumApril 17, 2020
openmrsIn OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly...CVE-2020-57326.1 MediumApril 17, 2020
tenable tenable.scStored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a...CVE-2020-57375.4 MediumApril 17, 2020
google androidIn authorize_enroll of the FPC IRIS TrustZone app, there is a possible out of bounds read due to...CVE-2020-00774.4 MediumApril 17, 2020
google androidIn set_shared_key of the FPC IRIS TrustZone app, there is a possible out of bounds read due to a...CVE-2020-00754.4 MediumApril 17, 2020
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open