CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
- qtsetMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock.9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles...9.8 Critical
- libgit2, debian linux +1 moreAn issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles...9.8 Critical
- trusteddomain opendmarc, fedoraproject fedora +1 moreOpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide...5.3 Medium
- qemuiscsi_aio_ioctl_cb in block/iscsi.c in QEMU 4.1.0 has a heap-based buffer over-read that may...3.8 Low
- decompress project decompressPath Traversal in decompress9.8 Critical
- croogoCroos-site scripting in Croogo4.8 Medium
- avira antivirusAvira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of...7.8 High
- google chrome, debian linux +1 moreInsufficient data validation in URL formatting in Google Chrome prior to 81.0.4044.122 allowed a...6.5 Medium
- google chrome, debian linux +1 moreUse after free in payments in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to...8.8 High
- google chrome, debian linux +1 moreOut of bounds read and write in PDFium in Google Chrome prior to 81.0.4044.122 allowed a remote...8.8 High
- advanced-woo-search advanced woo searchThe Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive...7.5 High
- sap erp, sap se s/4 hana, sap s\/4hana +2 moreEgypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and...5.4 Medium
- sap netweaver as abap business server pages, sap se netweaver as abap (business server pages test application sbspext phtmlb) +1 moreSAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701,...6.1 Medium
- admidioSQL Injection in Admidio7.7 High
- grafanaGrafana XSS in header column rename6.1 Medium
- helmlookup Function Information Discolosure in Helm8.5 High
- hp hpe iot \+ gcpA remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0...6.5 Medium
- hp hpe iot \+ gcpA unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4...9.8 Critical
- red hat openshift-ansible, redhat openshift container platform +1 moreA flaw was found in openshift-ansible. OpenShift Container Platform (OCP) 3.11 is too permissive...5.9 Medium
- hp blade maintenance entity, integrated maintenance entity, maintenance entity +2 moreThis document describes a security vulnerability in Blade Maintenance Entity, Integrated...9.0 Critical
- ibm mq, mq appliance +1 moreIBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial...5.3 Medium
- ibm cloud app managementIBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests...5.3 Medium
- ibm cloud app managementIBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which...4.3 Medium
resource-agentsSUSESecurity update for resource-agentsNo score- netgear d7800 firmware, ex6100 firmware, ex6150 firmware +10 more +12 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear d7800 firmware, r6400 firmware, r6700 firmware +9 more +11 moreCertain NETGEAR devices are affected by command injection by an authenticated user. This affects...6.8 Medium
- netgear r7500 firmware, r7800 firmware, wn3000rp firmware +2 more +4 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...5.3 Medium
- netgear d1500 firmware, d500 firmware, d6100 firmware +55 more +57 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...5.2 Medium
- netgear d1500 firmware, d500 firmware, d6100 firmware +55 more +57 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...5.2 Medium
- netgear r7800 firmware, r9000 firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear r6100 firmware, r7800 firmware, r9000 firmware +2 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear r7800 firmware, r9000 firmware +1 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user....6.8 Medium
- netgear d6400 firmware, d7000 firmware, d8500 firmware +20 more +22 moreCertain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000...5.2 Medium
- netgear r6700 firmware, r6900 firmware +1 moreCertain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and...5.2 Medium
- netgear r6220 firmwareNETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.5.2 Medium
- netgear d1500 firmware, d500 firmware, d6100 firmware +25 more +27 moreCertain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0...8.8 High
- netgear d6220 firmware, d6400 firmware, d8500 firmware +15 more +17 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...6.5 Medium
- netgear d7800 firmware, r6100 firmware, r7500 firmware +6 more +8 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...8.8 High
- netgear r6100 firmware, r7500 firmware, wndr3700 firmware +3 more +5 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...6.5 Medium
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects...6.8 Medium
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before...8.8 High
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...4.0 Medium
- netgear r8300 firmware, r8500 firmware +1 moreCertain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300...4.3 Medium
- netgear d7800 firmware, r6400 firmware, r6700 firmware +9 more +11 moreCertain NETGEAR devices are affected by incorrect configuration of security settings. This...6.3 Medium
- netgear d7800 firmware, r6100 firmware, r7500 firmware +4 more +6 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...6.5 Medium
- netgear d7800 firmware, r6700 firmware, r6900 firmware +5 more +7 moreCertain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This...6.5 Medium
- netgear wndr4500 firmwareNETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service.6.5 Medium
- netgear ex3700 firmware, ex3800 firmware, ex6100 firmware +4 more +6 moreCertain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66,...5.2 Medium
- netgear d6200 firmware, r6700 firmware, r6800 firmware +1 more +3 moreCertain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated...8.8 High
- Show moreLoading…