CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- netgear readynas osNETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by...4.0 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...5.2 Medium
- oppo coloros, color os +1 moreIn ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position...7.5 High
- evenroute iqrouter firmwareIn IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot,...9.8 Critical
- evenroute iqrouter firmwareIn the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of...7.5 High
- evenroute iqrouter firmwareIn IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote...9.8 Critical
- evenroute iqrouter firmwareIn IQrouter through 3.3.1, there is a root user without a password, which allows attackers to...9.8 Critical
- evenroute iqrouter firmwareIn IQrouter through 3.3.1, the Lua function diag_set_password in the web-panel allows remote...7.5 High
- evenroute iqrouter firmwareIQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in...9.8 Critical
- avg antivirus free, bitdefender antivirus 2020 +1 moreLink Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)7.1 High
- re2c, canonical ubuntu linux +1 morere2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme.7.8 High
- apple macos, mac os x +1 moreA memory corruption issue was addressed with improved validation. This issue is fixed in macOS...7.8 High
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chain7.5 High
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A hard-coded account allows...9.8 Critical
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The device can be reset to its...9.1 Critical
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. Authentication can be bypassed...9.8 Critical
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. The function do_cgi(), which...8.8 High
- dlink dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on...9.8 Critical
- bitcoin-abe project bitcoin-abeAbe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the...6.1 Medium
- b&r automation runtime, br-automation automation studio +1 moreB&R Automation Runtime SNMP Authentication and Authorization Weakness9.4 Critical
- tortoise orm project orm, tortoise tortoise-orm +1 moreSQL injection in Tortoise ORM6.3 Medium
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key...7.5 High
- zulip serverZulip Server before 2.1.3 allows XSS via the modal_link feature in the Markdown functionality.6.1 Medium
- zulip serverZulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality.6.1 Medium
- zulip serverZulip Server before 2.1.3 allows XSS via a Markdown link, with resultant account takeover.5.4 Medium
- huawei honor v20, honor v20 firmware +1 moreHuawei smartphones Honor V20 with versions earlier than 10.0.0.179(C636E3R4P3),versions earlier...5.3 Medium
- huawei taurus-al00b, taurus-al00b firmware +1 moreHuawei smartphones Taurus-AL00B with versions earlier than 10.0.0.205(C00E201R7P2) have an...5.5 Medium
- vmware installbuilderInstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with...7.5 High
- sonatype nexus repository managerAn issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is...8.8 High
- prestashopReflected XSS related in import page in PrestaShop4.1 Medium
- prestashopImproper access control on customers search in PrestaShop4.1 Medium
- prestashopImproper access control on product attributes page in PrestaShop4.1 Medium
- prestashopImproper access control on product page with combinations, attachments and specific prices in PrestaShop6.5 Medium
- prestashopReflected XSS with dashboard calendar of PrestaShop4.1 Medium
- prestashopReflected XSS on Search page of PrestaShop4.1 Medium
- prestashopReflected XSS on AdminCarts page of PrestaShop4.1 Medium
- prestashopReflected XSS on Exception page of PrestaShop4.1 Medium
- prestashopImproper Access Control for certain legacy controller in PrestaShop4.1 Medium
- prestashopReflected XSS with back parameter in PrestaShop4.1 Medium
- prestashopReflected XSS on AdminFeatures page of PrestaShop4.1 Medium
- prestashopOpen redirection when using back parameter of PrestaShop4.1 Medium
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G...7.8 High
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...7.7 High
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2...4.0 Medium
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by stored XSS. This affects M4300-28G before 12.0.2.15,...5.2 Medium
- netgear m4200 firmware, m4300-12x12f firmware, m4300-24x24f firmware +7 more +9 moreCertain NETGEAR devices are affected by vertical privilege escalation. This affects M4300-28G...7.8 High
- prestashopReflected XSS in security compromised page of PrestaShop4.4 Medium
- prestashopReflected XSS on AdminAttributesGroups page of PrestaShop4.4 Medium
- Show moreLoading…