# CVEs published 2020-04-29

83 CVEs were published on April 29, 2020: 3 critical, 10 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-5623](https://cve.now/CVE-2019-5623.md): Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection') (no CVSS, Accellion File Transfer Appliance)
- [CVE-2019-5622](https://cve.now/CVE-2019-5622.md): Accellion File Transfer Appliance Use of Hard-coded Credentials (no CVSS, Accellion File Transfer Appliance)
- [CVE-2019-5621](https://cve.now/CVE-2019-5621.md): ABBS Software Audio Media Player Stack-based Buffer Overflow (no CVSS, ABBS Software Audio Media Player)
- [CVE-2019-5620](https://cve.now/CVE-2019-5620.md): ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function (no CVSS, ABB MicroSCADA Pro SYS600)
- [CVE-2019-5619](https://cve.now/CVE-2019-5619.md): AASync.com AASync Stack-based Buffer Overflow (no CVSS, AASync.com AASync)
- [CVE-2019-5618](https://cve.now/CVE-2019-5618.md): A-PDF WAV to MP3 Stack-based Buffer Overflow (no CVSS, A-PDF WAV to MP3)
- [CVE-2020-12477](https://cve.now/CVE-2020-12477.md): The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an… (no CVSS, nilsteampassnet/teampass)
- [CVE-2020-12478](https://cve.now/CVE-2020-12478.md): TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. (no CVSS, nilsteampassnet/teampass)
- [CVE-2020-12479](https://cve.now/CVE-2020-12479.md): TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with… (no CVSS, nilsteampassnet/teampass)
- [CVE-2016-11061](https://cve.now/CVE-2016-11061.md): Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before… (no CVSS)
- [CVE-2020-11943](https://cve.now/CVE-2020-11943.md): An issue was discovered in Open-AudIT 3.2.2. (no CVSS)
- [CVE-2020-11942](https://cve.now/CVE-2020-11942.md): An issue was discovered in Open-AudIT 3.2.2. (no CVSS)
- [CVE-2020-11024](https://cve.now/CVE-2020-11024.md): Man-in-the-middle attack in Moonlight iOS/tvOS (CVSS 6.1, moonlight-stream Moonlight)
- [CVE-2019-16011](https://cve.now/CVE-2019-16011.md): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 7.8, Cisco IOS XE SD-WAN Software)
- [CVE-2020-12467](https://cve.now/CVE-2020-12467.md): Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. (no CVSS, intelliants/subrion)
- [CVE-2020-12468](https://cve.now/CVE-2020-12468.md): Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. (no CVSS, intelliants/subrion)
- [CVE-2020-12469](https://cve.now/CVE-2020-12469.md): admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the… (no CVSS, intelliants/subrion)
- [CVE-2020-12470](https://cve.now/CVE-2020-12470.md): MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. (no CVSS)
- [CVE-2020-12471](https://cve.now/CVE-2020-12471.md): MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because… (no CVSS)
- [CVE-2020-12472](https://cve.now/CVE-2020-12472.md): MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. (no CVSS)
- [CVE-2020-12473](https://cve.now/CVE-2020-12473.md): MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to… (no CVSS)
- [CVE-2020-12465](https://cve.now/CVE-2020-12465.md): An array overflow was discovered in mt76\_add\_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka… (no CVSS)
- [CVE-2020-11021](https://cve.now/CVE-2020-11021.md): HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client (CVSS 6.3, actions http-client · @actions/http-client)
- [CVE-2020-12464](https://cve.now/CVE-2020-12464.md): usb\_sg\_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a… (no CVSS)
- [CVE-2020-11020](https://cve.now/CVE-2020-11020.md): Authentication and extension bypass in Faye (CVSS 8.5, Faye)
- [CVE-2020-11009](https://cve.now/CVE-2020-11009.md): IDOR can reveal execution data and logs to unauthorized user in Rundeck (CVSS 6.5, rundeck · org.rundeck:rundeck)
- [CVE-2020-12275](https://cve.now/CVE-2020-12275.md): GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API. (no CVSS)
- [CVE-2020-12276](https://cve.now/CVE-2020-12276.md): GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. (no CVSS)
- [CVE-2020-12277](https://cve.now/CVE-2020-12277.md): GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated. (no CVSS)
- [CVE-2020-12462](https://cve.now/CVE-2020-12462.md): The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. (no CVSS)
- [CVE-2020-12461](https://cve.now/CVE-2020-12461.md): PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. (no CVSS)
- [CVE-2020-12458](https://cve.now/CVE-2020-12458.md): An information-disclosure flaw was found in Grafana through 6.7.3. (no CVSS, github.com/grafana/grafana)
- [CVE-2020-12459](https://cve.now/CVE-2020-12459.md): In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml… (no CVSS, github.com/grafana/grafana)
- [CVE-2020-8775](https://cve.now/CVE-2020-8775.md): Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. (no CVSS)
- [CVE-2019-19165](https://cve.now/CVE-2019-19165.md): AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by… (CVSS 7.2, Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8…)
- [CVE-2020-7804](https://cve.now/CVE-2020-7804.md): ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the… (CVSS 6.4, HandySoft Groupware(HShell.dll) for for Windows 7, 8,)
- [CVE-2020-2575](https://cve.now/CVE-2020-2575.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-8773](https://cve.now/CVE-2020-8773.md): The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. (no CVSS)
- [CVE-2020-8774](https://cve.now/CVE-2020-8774.md): Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. (no CVSS)
- [CVE-2020-11677](https://cve.now/CVE-2020-11677.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). (no CVSS)
- [CVE-2020-12446](https://cve.now/CVE-2020-12446.md): The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and… (no CVSS)
- [CVE-2020-11676](https://cve.now/CVE-2020-11676.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). (no CVSS)
- [CVE-2020-11675](https://cve.now/CVE-2020-11675.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). (no CVSS)
- [CVE-2020-11674](https://cve.now/CVE-2020-11674.md): Cerner medico 26.00 allows variable reuse, possibly causing data corruption. (no CVSS)
- [CVE-2019-4288](https://cve.now/CVE-2019-4288.md): IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with… (CVSS 4.3, IBM Maximo Anywhere)
- [CVE-2019-4286](https://cve.now/CVE-2019-4286.md): IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with… (CVSS 4.3, IBM Maximo Anywhere)
- [CVE-2017-18856](https://cve.now/CVE-2017-18856.md): NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection. (no CVSS)
- [CVE-2017-18860](https://cve.now/CVE-2017-18860.md): Certain NETGEAR devices are affected by debugging command execution. (no CVSS)
- [CVE-2018-21232](https://cve.now/CVE-2018-21232.md): re2c before 2.0 has uncontrolled recursion that causes stack consumption in find\_fixed\_tags. (no CVSS)
- [CVE-2020-10797](https://cve.now/CVE-2020-10797.md): An XSS vulnerability resides in the hostname field of the diag\_ping.php page in pfsense before 2.4.5 version. (no CVSS)
- [CVE-2020-11446](https://cve.now/CVE-2020-11446.md): ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET… (no CVSS)
- [CVE-2017-18855](https://cve.now/CVE-2017-18855.md): NETGEAR WNR854T devices before 1.5.2 are affected by command execution. (no CVSS)
- [CVE-2017-18854](https://cve.now/CVE-2017-18854.md): NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection. (CVSS 6.7)
- [CVE-2017-18853](https://cve.now/CVE-2017-18853.md): Certain NETGEAR devices are affected by password recovery and file access. (CVSS 9.6)
- [CVE-2019-20781](https://cve.now/CVE-2019-20781.md): An issue was discovered in LG Bridge before April 2019 on Windows. (no CVSS)
- [CVE-2020-12252](https://cve.now/CVE-2020-12252.md): An issue was discovered in Gigamon GigaVUE 5.5.01.11. (no CVSS)
- [CVE-2020-12251](https://cve.now/CVE-2020-12251.md): An issue was discovered in Gigamon GigaVUE 5.5.01.11. (no CVSS)
- [CVE-2019-16653](https://cve.now/CVE-2019-16653.md): An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges. (no CVSS)
- [CVE-2019-7634](https://cve.now/CVE-2019-7634.md): SUAP V2 allows XSS during the update of user information. (no CVSS)
- [CVE-2019-16652](https://cve.now/CVE-2019-16652.md): The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands. (no CVSS)
- [CVE-2020-12246](https://cve.now/CVE-2020-12246.md): Beeline Smart Box 2.0.38 routers allow "Advanced settings \> Other \> Diagnostics" OS command injection via the Ping ping\_ipaddr parameter… (no CVSS)
- [CVE-2020-11884](https://cve.now/CVE-2020-11884.md): In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code… (no CVSS)
- [CVE-2019-20792](https://cve.now/CVE-2019-20792.md): OpenSC before 0.20.0 has a double free in coolkey\_free\_private\_data because coolkey\_add\_object in libopensc/card-coolkey.c lacks a… (no CVSS)
- [CVE-2020-12447](https://cve.now/CVE-2020-12447.md): A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to… (no CVSS)
- [CVE-2020-3955](https://cve.now/CVE-2020-3955.md): ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML… (no CVSS, VMware ESXi)
- [CVE-2019-19100](https://cve.now/CVE-2019-19100.md): Privilege escalation via B&R Automation Studio upgrade service (CVSS 7.5, B&R Automation Studio)
- [CVE-2019-19102](https://cve.now/CVE-2019-19102.md): Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service (CVSS 5.5, B&R Automation Studio)
- [CVE-2019-19101](https://cve.now/CVE-2019-19101.md): Incomplete communication encryption and validation in B&R Automation Studio upgrade service (CVSS 6.5, B&R Automation Studio)
- [CVE-2020-8489](https://cve.now/CVE-2020-8489.md): ABB System 800xA Inter process communication vulnerability - 800xA Information Management (CVSS 7.8, ABB 800xA Information Management)
- [CVE-2020-8488](https://cve.now/CVE-2020-8488.md): ABB System 800xA Inter process communication vulnerability - 800xA Batch Management (CVSS 7.8, ABB 800xA Batch Management)
- [CVE-2020-8487](https://cve.now/CVE-2020-8487.md): ABB System 800xA Inter process communication vulnerability - System 800xA Base (CVSS 6.6, ABB System 800xA Base)
- [CVE-2020-8486](https://cve.now/CVE-2020-8486.md): ABB System 800xA Inter process communication vulnerability - 800xA RNRP (CVSS 6.6, ABB 800xA RNRP)
- [CVE-2020-8485](https://cve.now/CVE-2020-8485.md): ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300 (CVSS 7.8, ABB 800xA for MOD300)
- [CVE-2020-8484](https://cve.now/CVE-2020-8484.md): ABB System 800xA Inter process communication vulnerability - 800xA for DCI (CVSS 7.8, ABB 800xA for DCI)
- [CVE-2020-8478](https://cve.now/CVE-2020-8478.md): ABB System 800xA Inter process communication vulnerability (CVSS 5.3, ABB OPC Server for AC · ABB MMS Server for AC +1)
- [CVE-2020-12443](https://cve.now/CVE-2020-12443.md): BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf… (no CVSS)
- [CVE-2020-8481](https://cve.now/CVE-2020-8481.md): ABB Central Licensing System - Information disclosure (CVSS 9.8, ABB Central Licensing System · ABB Ability System 800xA +15)
- [CVE-2020-8471](https://cve.now/CVE-2020-8471.md): ABB Central Licensing System - Weak File Permissions (CVSS 7.8, ABB Central Licensing System · ABB Ability System 800xA +15)
- [CVE-2020-11022](https://cve.now/CVE-2020-11022.md): jQuery has a potential XSS vulnerability (CVSS 6.9, jQuery · drupal +5)
- [CVE-2020-11023](https://cve.now/CVE-2020-11023.md): Potential XSS vulnerability in jQuery (CVSS 6.9, KEV, jQuery · jquery-rails +2)
- [CVE-2020-8475](https://cve.now/CVE-2020-8475.md): ABB Central Licensing System - Denial of Service Vulnerability (CVSS 5.3, ABB Central Licensing System · ABB Ability System 800xA +16)
- [CVE-2020-8476](https://cve.now/CVE-2020-8476.md): ABB Central Licensing System - Elevation of Privilege Vulnerability (CVSS 5.3, ABB Central Licensing System · ABB Ability System 800xA +16)
- [CVE-2020-8479](https://cve.now/CVE-2020-8479.md): ABB Central Licensing System - XML External Entity Injection (CVSS 9.4, ABB Central Licensing System · ABB Ability System 800xA +16)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2020-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.