CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit phantompdf, foxitsoftware reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- netgear d7800 firmware, r7500 firmware, r7800 firmware +4 more +6 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.8 Medium
- netgear d7800 firmware, dm200 firmware, r6100 firmware +8 more +10 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- gitlabAn issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still...6.5 Medium
- gitlabAn issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead...7.5 High
- gitlabAn issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7...7.5 High
- libslirp project libslirp, canonical ubuntu linux, debian linux +2 more +4 morelibslirp: use after free vulnerability cause a denial of service.7.5 High
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak...7.5 High
- schneider-electric ecostruxure machine expert, modicon m218 firmware, modicon m241 firmware +4 more +6 moreA CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow...9.8 Critical
- schneider-electric vijeo designerA CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and...7.8 High
- schneider-electric ecostruxure machine expert, somachine basic, modicon m100 firmware +2 more +4 moreA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (...9.8 Critical
- No product listedTest update for SUSE:SLE-15-SP2:Update (security)No score
- schneider-electric 140 cpu6x firmware, 140 noc 77101 firmware, 140 noc 78x00 firmware +7 more +9 moreA CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions...7.5 High
- jqueryjQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element.6.1 Medium
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects WAC505...8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0...8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- elementor page builderAn issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor...9.9 Critical
- teeworlds, canonical ubuntu linux, debian linux +3 more +5 moreCServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote...7.5 High
- teeworlds, opensuse leap +1 moreTeeworlds before 0.7.4 has an integer overflow when computing a tilemap size.9.8 Critical
- netgear ex3700 firmware, ex3800 firmware, ex6120 firmware +9 more +11 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...8.8 High
- alanaktion phprojectRCE via file upload in Phproject9.9 Critical
- netgear wndr3700 firmware, wndr4300 firmware, wnr2000 firmware +2 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear dgn2200 firmware, dgnd2200b firmware, jr6150 firmware +12 more +14 moreCertain NETGEAR devices are affected by CSRF. This affects R6300v2 before 1.0.4.8, R6400v2 before...8.8 High
- netgear d6220 firmware, d6400 firmware, d8500 firmware +16 more +18 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- netgear d7800 firmware, r6100 firmware, r7500 firmware +4 more +6 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...4.7 Medium
- netgear r6700 firmware, r6800 firmware, r6900 firmware +2 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear wac510 firmwareNETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass.8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreNETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation.8.8 High
- netgear wc7500 firmware, wc7520 firmware, wc7600 firmware +2 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear r8000 firmwareNETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an...6.8 Medium
- netgear d3600 firmware, d6000 firmware, d6100 firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear jnr1010 firmware, jr6150 firmware, jwnr2010 firmware +11 more +13 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- netgear d6100 firmware, d7000 firmware, d7800 firmware +22 more +24 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear r6300 firmware, r6400 firmware, r6700 firmware +3 more +5 moreCertain NETGEAR devices are affected by denial of service. This affects R6300v2 before 1.0.4.8,...6.5 Medium
- netgear dst6501 firmware, wnr2000 firmware +1 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...8.8 High
- netgear d7800 firmware, d8500 firmware, r6400 firmware +10 more +12 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear ex6100 firmware, ex6150 firmware, ex6200 firmware +3 more +5 moreCertain NETGEAR devices are affected by CSRF. This affects EX6100 before 1.0.2.16_1.1.130,...8.8 High
- redhat openshift container platform, red hat openshift/cluster-image-registry-operator +1 moreInformation Disclosure in OpenShift Container Platform7.0 High
- netgear gs110emx firmware, gs810emx firmware, xs512em firmware +1 more +3 moreCertain NETGEAR devices are affected by denial of service. This affects GS110EMX before 1.0.0.9,...6.5 Medium
- netgear gs810emx firmware, xs512em firmware, xs724em firmware +2 moreCertain NETGEAR devices are affected by authentication bypass. This affects GS810EMX before 1.0.0...8.8 High
- lazysizes project lazysizesCross-site scripting in lazysizes5.4 Medium
- netgear wac120 firmware, wac505 firmware, wac510 firmware +8 more +10 moreCertain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0...5.2 Medium
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- Show moreLoading…