CVEs published in April 2020
2,302 vulnerabilities, 307 critical, 16 exploited.
sambaUbuntusamba regressionNo score- ibm maximo anywhereIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user...4.3 Medium
- ibm maximo anywhereIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user...4.3 Medium
- netgear readynas os firmwareNETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.6.7 Medium
- netgear fs752tp firmware, gs108t firmware, gs110tp firmware +22 more +24 moreCertain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2...7.7 High
- re2cre2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.5.5 Medium
- netgate pfsenseAn XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2...6.1 Medium
- eset antivirus and antispyware, endpoint antivirus, endpoint security +5 more +7 moreESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access...7.8 High
- netgear wnr854t firmwareNETGEAR WNR854T devices before 1.5.2 are affected by command execution.8.8 High
- netgear readynas os firmwareNETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.6.7 Medium
- netgear d8500 firmware, dgn2200 firmware, r6300 firmware +13 more +15 moreCertain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0...9.6 Critical
- lg bridgeAn issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.7.8 High
- gigamon gigavueAn issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an...6.2 Medium
- gigamon gigavueAn issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an...2.2 Low
- geniusbytes genius serverAn application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote...8.8 High
- ifrn sistema unificado de administracao publicaSUAP V2 allows XSS during the update of user information.5.4 Medium
- geniusbytes genius serverThe BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated...7.2 High
- beeline smart box firmwareBeeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command...8.8 High
- opensc project openscOpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in...6.8 Medium
- onkyo tx-nr585 firmwareA Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows...7.5 High
- vmware esxiESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do...9.3 Critical
- b&r automation studioPrivilege escalation via B&R Automation Studio upgrade service7.5 High
- b&r automation studioZip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service5.5 Medium
- b&r automation studioIncomplete communication encryption and validation in B&R Automation Studio upgrade service6.5 Medium
- abb 800xa information managementABB System 800xA Inter process communication vulnerability - 800xA Information Management7.8 High
- abb 800xa batch managementABB System 800xA Inter process communication vulnerability - 800xA Batch Management7.8 High
- abb system 800xa base, 800xa base system +1 moreABB System 800xA Inter process communication vulnerability - System 800xA Base6.6 Medium
- abb 800xa rnrpABB System 800xA Inter process communication vulnerability - 800xA RNRP6.6 Medium
- abb 800xa, 800xa for mod300 +1 moreABB System 800xA Inter process communication vulnerability - 800xA for Mod 3007.8 High
- abb 800xa, 800xa for dci +1 moreABB System 800xA Inter process communication vulnerability - 800xA for DCI7.8 High
- abb base software for softcontrol, base software, mms server for ac 800m +3 more +5 moreABB System 800xA Inter process communication vulnerability5.3 Medium
- bigbluebuttonBigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the...9.8 Critical
- abb advabuild, central licensing system, compact hmi +15 more +17 moreABB Central Licensing System - Information disclosure9.8 Critical
- abb advabuild, central licensing system, compact hmi +15 more +17 moreABB Central Licensing System - Weak File Permissions7.8 High
- abb advabuild, central licensing system, compact hmi +16 more +18 moreABB Central Licensing System - XML External Entity Injection9.4 Critical
- abb advabuild, central licensing system, compact hmi +16 more +18 moreABB Central Licensing System - Elevation of Privilege Vulnerability5.3 Medium
- abb advabuild, central licensing system, compact hmi +16 more +18 moreABB Central Licensing System - Denial of Service Vulnerability5.3 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQuery6.9 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerability6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacks9.8 Critical
- abb system 800xa base, 800xa base system +1 moreABB System 800xA Weak File Permissions - ABB System 800xA Base7.3 High
- abb base software for softcontrol, base software, control builder m professional +5 more +7 moreABB System 800xA Weak File Permissions - different products5.5 Medium
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...9.8 Critical
- freebsd, netapp clustered data ontap +1 moreIn FreeBSD 12.1-STABLE before r356035, 12.1-RELEASE before 12.1-RELEASE-p4, 11.3-STABLE before...9.8 Critical
- freebsdIn FreeBSD 12.1-STABLE before r357490, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before...9.1 Critical
- freebsdIn FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before...6.0 Medium
- ivanti avalancheIvanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP...9.8 Critical
- opmantek open-auditOpen-AudIT 3.3.0 allows an XSS attack after login.5.4 Medium
- prasathmani tiny file managerIn Tiny File Manager 2.4.1, there is a vulnerability in the ajax file backup copy functionality...7.7 High
- prasathmani tiny file managerIn Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive...7.7 High
- Show moreLoading…