CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- netgear xr500 firmwareNETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass.8.8 High
- plex media serverImproper Input Validation in Plex Media Server on Windows allows a local, unauthenticated...7.8 High
- netgear xr500 firmwareNETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated...8.8 High
- netgear d6220 firmware, d6400 firmware, d7000 firmware +34 more +36 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...4.6 Medium
- hcltech connections, hcl software "hcl connections" +1 more"HCL Connections is vulnerable to possible information leakage and could disclose sensitive...6.5 Medium
- netgear plw1000 firmware, plw1010 firmware, r7800 firmware +2 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.8 Medium
- netgear xr500 firmwareNETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated...8.8 High
- netgear ex3700 firmware, ex3800 firmware, ex6120 firmware +10 more +12 moreCertain NETGEAR devices are affected by authentication bypass. This affects EX3700 before 1.0.0...8.8 High
- abb 800xa information manager, system 800xa information manager +1 moreABB System 800xA Information Manager Remote Code Execution8.8 High
- netgear d6100 firmware, d7800 firmware, ex6150 firmware +6 more +8 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.7 Medium
- netgear xr500 firmwareNETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated...8.8 High
- netgear r6100 firmware, r7500 firmware, wndr3700 firmware +3 more +5 moreCertain NETGEAR devices are affected by CSRF. This affects R6100 before 1.0.1.12, R7500 before 1...8.8 High
- netgear d7800 firmware, ex6100 firmware, ex6150 firmware +10 more +12 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d6100 firmware, d7000 firmware, d7800 firmware +11 more +13 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6100 before V1.0.0...8.4 High
- netgear d6220 firmware, d6400 firmware, d8500 firmware +15 more +17 moreCertain NETGEAR devices are affected by administrative password disclosure. This affects D6220...8.4 High
- netgear d6220 firmware, d6400 firmware, d7000 firmware +27 more +29 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.4 High
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure6.2 Medium
- netgear d6100 firmware, d7800 firmware, r6100 firmware +7 more +9 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +15 more +17 moreCertain NETGEAR devices are affected by a buffer overflow. This affects D6200 before 1.1.00.24,...8.4 High
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues9.1 Critical
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +15 more +17 moreCertain NETGEAR devices are affected by denial of service. This affects D6200 before 1.1.00.24,...6.2 Medium
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +15 more +17 moreCertain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1...8.8 High
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials6.2 Medium
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +15 more +17 moreCertain NETGEAR devices are affected by CSRF. This affects D6200 before 1.1.00.24, D7000 before 1...8.8 High
- busch-jaeger 6186/11 telefon-gateway, abb tg/s 3.2 telephone gateway, tg\/s3.2 firmware +1 more +3 moreABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control9.1 Critical
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +15 more +17 moreCertain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1...5.0 Medium
- netgear d6200 firmware, d7000 firmware, jnr1010 firmware +14 more +16 moreCertain NETGEAR devices are affected by XSS. This affects D6200 before 1.1.00.24, D7000 before 1...5.0 Medium
- netgear d7800 firmware, r7500 firmware, r7800 firmware +2 more +4 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +7 more +9 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +53 more +55 moreCertain NETGEAR devices are affected by XSS. This affects D3600 before 1.0.0.67, D6000 before 1.0...4.2 Medium
- netgear d6200 firmware, jnr1010 firmware, jr6150 firmware +6 more +8 moreCertain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24,...8.4 High
- abb system 800xa base, 800xa base system +1 moreABB System 800xA Weak Registry Permissions7.8 High
- netgear d6200 firmware, jnr1010 firmware, jr6150 firmware +6 more +8 moreCertain NETGEAR devices are affected by command injection. This affects D6200 before 1.1.00.24,...8.4 High
- jetbrains teamcityIn JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled...4.9 Medium
- jetbrains spaceIn JetBrains Space through 2020-04-22, the password authentication implementation was insecure.9.8 Critical
- jetbrains spaceIn JetBrains Space through 2020-04-22, the session timeout period was configured improperly.7.5 High
- jetbrains youtrackJetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a...7.5 High
- jetbrains youtrackIn JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.2.7 Low
- jetbrains hubIn JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.7.5 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted...9.8 Critical
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import...6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on...7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity...2.7 Low
- jetbrains golandIn JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.7.5 High
- jetbrains spaceJetBrains Space through 2020-04-22 allows stored XSS in Chats.5.4 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +50 more +52 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.7 Medium
- netgear d6220 firmware, d6400 firmware, d8500 firmware +6 more +8 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects R6250...6.2 Medium
- titan sf rush smart band firmwareAn issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that...8.1 High
- atlassian confluence serverThe attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through...6.1 Medium
- Show moreLoading…