CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6020 firmware, r6080 firmware +3 more +5 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of...8.1 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear r6020 firmware, r6080 firmware, r6700 firmware +2 more +4 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow...9.1 Critical
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear d6200 firmware, r6020 firmware, r6080 firmware +4 more +6 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote...9.8 Critical
- netgear d6200 firmware, r6020 firmware, r6080 firmware +4 more +6 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear r6100 firmware, r7500 firmware, r7800 firmware +1 more +3 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...6.3 Medium
- gnu mailman, canonical ubuntu linux, debian linux +3 more +5 moreGNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME...6.1 Medium
fake-staticcrates.iofake-static allows converting any reference into a `'static` referenceNo score- os str bytes project str bytesos_str_bytes relies on undefined behavior of `char::from_u32_unchecked`7.5 High
- postfix** DISPUTED ** A certain Postfix 2.10.1-7 package could allow an attacker to send an email from...5.3 Medium
- mongodb c driver, whoopsie project whoopsie +1 morebson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and...5.5 Medium
- nanometrics centaur, titansma +1 moreNanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the...9.8 Critical
- fifthplay s.a.m.iFifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request.6.1 Medium
- app2pro airdisk proThe AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder...6.1 Medium
- app2pro airdisk proThe AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.6.1 Medium
- app2pro airdisk proThe AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI...6.1 Medium
- file transfer ifamily project transfer ifamilyDONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path.7.5 High
- minioAuthentication bypass MinIO Admin API9.3 Critical
- netgear r6100 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22,...4.5 Medium
- netgear readynas osNETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.8.0 High
- binance tss-libIncorrect Default Permissions in Binance tss-lib8.2 High
- netgear r6100 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22,...4.5 Medium
- netgear r6220 firmware, wndr3700 firmware +1 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear dgn2200 firmware, dgn2200b firmware, ex3700 firmware +17 more +19 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d6400 firmware, ex6200 firmware, ex7000 firmware +13 more +15 moreCertain NETGEAR devices are affected by command injection by an unauthenticated attacker. This...8.8 High
- netgear d7800 firmware, r7800 firmware, r9000 firmware +2 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- netgear r6100 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22,...4.5 Medium
- netgear d1500 firmware, d500 firmware, d6100 firmware +46 more +48 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500...7.1 High
- netgear d3600 firmware, d6000 firmware +1 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- netgear d3600 firmware, d6000 firmware +1 moreCertain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76...8.8 High
- netgear d3600 firmware, d6000 firmware +1 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600...4.6 Medium
- netgear r6700 firmware, r7500 firmware, r7800 firmware +6 more +8 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d6220 firmware, d6400 firmware, d7000 firmware +27 more +29 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...6.8 Medium
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP...8.1 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0...8.8 High
- netgear wac505 firmware, wac510 firmware +1 moreCertain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505...8.1 High
- netgear r7800 firmwareNETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.6.8 Medium
- Show moreLoading…