CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- linuxfoundation ceph, canonical ubuntu linux +1 moreAn issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can...7.5 High
- mediawikiThe CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain...7.5 High
- netgear d7800 firmware, dm200 firmware, r6100 firmware +8 more +10 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +4 more +6 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d7800 firmware, r7800 firmware, r8900 firmware +3 more +5 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d7800 firmware, dm200 firmware, r6100 firmware +8 more +10 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear dm200 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear gs810emx firmwareNETGEAR GS810EMX devices before 1.0.0.5 are affected by disclosure of sensitive information.6.5 Medium
- netgear r6100 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22,...4.5 Medium
- netgear d3600 firmware, d6000 firmware +1 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- simplesamlphpInformation disclosure of source code in SimpleSAMLphp3.0 Low
- sysaid on-premiseSysAid On-Premise 20.1.11, by default, allows the AJP protocol port, which is vulnerable to a...9.8 Critical
- dlink dir-615 firmwareThe login page on D-Link DIR-615 T1 20.10 devices allows remote attackers to bypass the CAPTCHA...8.8 High
- netgear r6700 firmware, r7000 firmware, r7100lg firmware +3 more +5 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700...6.2 Medium
- netgear d7000 firmware, jnr1010 firmware, jr6150 firmware +10 more +12 moreCertain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000...8.8 High
- netgear d6100 firmwareNETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.8.4 High
- netgear r7800 firmwareNETGEAR R7800 devices before 1.0.2.36 are affected by command injection.6.7 Medium
- netgear d6100 firmware, r6300 firmware, r6400 firmware +6 more +8 moreCertain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10...8.4 High
- netgear d6100 firmware, d6220 firmware +1 moreCertain NETGEAR devices are affected by command injection. This affects D6220 before 1.0.0.28 and...6.7 Medium
- netgear r6400 firmware, r6700 firmware, r6900 firmware +4 more +6 moreCertain NETGEAR devices are affected by command injection. This affects R6400 before 1.0.1.24,...6.7 Medium
- netgear r6400 firmware, r7900 firmware, r8000 firmware +1 more +3 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...6.2 Medium
- netgear d1500 firmware, d500 firmware, d7000 firmware +2 more +4 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.4 High
- netgear d8500 firmware, r6200 firmware, r6250 firmware +9 more +11 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...7.5 High
- netgear r6700 firmware, r6800 firmware +1 moreCertain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and...6.1 Medium
- netgear d7000 firmware, r6220 firmware, r6700 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection. This affects R6220 before 1.1.0.50,...6.7 Medium
- hcltech appscan"HCL AppScan Enterprise uses hard-coded credentials which can be exploited by attackers to get...7.5 High
- netgear d7800 firmware, ex6200 firmware, r6100 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection. This affects R6100 before 1.0.1.14,...6.7 Medium
- netgear r7800 firmwareNETGEAR R7800 devices before 1.0.2.30 are affected by incorrect configuration of security settings.6.2 Medium
- google earth, earth pro +1 moreDLL Hijacking in Google Earth Pro Windows installer7.8 High
- netgear r7800 firmware, r9000 firmware +1 moreCertain NETGEAR devices are affected by command injection. This affects R7800 before 1.0.2.16 and...6.7 Medium
- netgear wac120 firmware, wac510 firmware, wn604 firmware +7 more +9 moreCertain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10,...6.7 Medium
- vestacp vesta control panelAn elevation of privilege in Vesta Control Panel through 0.9.8-26 allows an attacker to gain root...8.8 High
- vestacp vesta control panelA remote command execution in Vesta Control Panel through 0.9.8-26 allows any authenticated user...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level...5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup...5.3 Medium
- netgear wac120 firmware, wac510 firmware, wn604 firmware +7 more +9 moreCertain NETGEAR devices are affected by command injection. This affects WAC510 before 1.3.0.10,...6.7 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by...4.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- red hat undertow, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreImproper Input Validation in Undertow8.1 High
- simplesamlphp saml2Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET6.5 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- flexera flexnet publisherA Denial of Service vulnerability related to stack exhaustion has been identified in FlexNet...7.5 High
- flexera flexnet publisherA Denial of Service vulnerability related to command handling has been identified in FlexNet...7.5 High
- netgear readynas osNETGEAR ReadyNAS OS 6 devices running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- netgear readynas osNETGEAR ReadyNAS OS 6 devices, running ReadyNAS OS versions prior to 6.8.0 are affected by stored...5.2 Medium
- Show moreLoading…