# CVEs published 2020-04-01

107 CVEs were published on April 1, 2020: 1 critical, 5 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-1927](https://cve.now/CVE-2020-1927.md): In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod\_rewrite that were intended to be self-referential might be fooled by en (no CVSS, Apache HTTP Server)
- [CVE-2020-8146](https://cve.now/CVE-2020-8146.md): In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack (no CVSS, UniFi Video Controller)
- [CVE-2020-8145](https://cve.now/CVE-2020-8145.md): The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement (no CVSS, UniFi Video Controller)
- [CVE-2020-8144](https://cve.now/CVE-2020-8144.md): The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, d (no CVSS, UniFi Video Controller)
- [CVE-2020-11469](https://cve.now/CVE-2020-11469.md): Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows (CVSS 6.3)
- [CVE-2020-11470](https://cve.now/CVE-2020-11470.md): Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user' (CVSS 2.3)
- [CVE-2020-1958](https://cve.now/CVE-2020-1958.md): When LDAP authentication is enabled in Apache Druid 0.17.0, callers of Druid APIs with a valid set of LDAP credentials can bypass the creden (no CVSS, Apache Druid · org.apache.druid:druid)
- [CVE-2019-17564](https://cve.now/CVE-2019-17564.md): Unsafe deserialization occurs within a Dubbo application which has HTTP remoting enabled. (no CVSS, Apache Dubbo · org.apache.dubbo:dubbo-rpc-http-invoker)
- [CVE-2018-11802](https://cve.now/CVE-2018-11802.md): In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. (no CVSS, Apache Solr · org.apache.solr:solr-parent +1)
- [CVE-2020-6009](https://cve.now/CVE-2020-6009.md): LearnDash Wordpress plugin version below 3.1.6 is vulnerable to Unauthenticated SQL Injection. (no CVSS, LearnDash Wordpress Plugin)
- [CVE-2020-10598](https://cve.now/CVE-2020-10598.md): In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia (PAS) ES System v1.6.1, a restricted desktop environment escape vulnerability e (no CVSS, Becton, Dickinson and Company (BD) Pyxis MedStation ES Syst…)
- [CVE-2020-11463](https://cve.now/CVE-2020-11463.md): An issue was discovered in Deskpro before 2019.8.0. (no CVSS)
- [CVE-2020-11464](https://cve.now/CVE-2020-11464.md): An issue was discovered in Deskpro before 2019.8.0. (CVSS 6.5)
- [CVE-2020-11465](https://cve.now/CVE-2020-11465.md): An issue was discovered in Deskpro before 2019.8.0. (CVSS 8.8)
- [CVE-2020-11466](https://cve.now/CVE-2020-11466.md): An issue was discovered in Deskpro before 2019.8.0. (CVSS 7.6)
- [CVE-2020-11467](https://cve.now/CVE-2020-11467.md): An issue was discovered in Deskpro before 2019.8.0. (CVSS 9.1)
- [CVE-2019-11254](https://cve.now/CVE-2019-11254.md): Kubernetes API Server denial of service vulnerability from malicious YAML payloads (CVSS 6.5, Kubernetes · gopkg.in/yaml.v2 +1)
- [CVE-2019-9163](https://cve.now/CVE-2019-9163.md): The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafte (no CVSS)
- [CVE-2020-8966](https://cve.now/CVE-2020-8966.md): Cross Site Scripting (XSS) flaws found in Tiki-Wiki CMS software (CVSS 6.5, Tiki-Wiki Groupware Tiki-Wiki CMS)
- [CVE-2020-10948](https://cve.now/CVE-2020-10948.md): Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a (no CVSS)
- [CVE-2020-1954](https://cve.now/CVE-2020-1954.md): Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. (no CVSS, Apache CXF · org.apache.cxf:cxf-rt-management)
- [CVE-2020-5290](https://cve.now/CVE-2020-5290.md): session fixation in rCTF (CVSS 6.5, redpwn rctf)
- [CVE-2020-1934](https://cve.now/CVE-2020-1934.md): In Apache HTTP Server 2.4.0 to 2.4.41, mod\_proxy\_ftp may use uninitialized memory when proxying to a malicious FTP server. (no CVSS, Apache HTTP Server)
- [CVE-2020-10199](https://cve.now/CVE-2020-10199.md): Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2). (CVSS 8.8, KEV, org.sonatype.nexus:nexus-extdirect)
- [CVE-2020-1949](https://cve.now/CVE-2020-1949.md): Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the adminis (no CVSS, Apache Sling)
- [CVE-2020-10204](https://cve.now/CVE-2020-10204.md): Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution. (no CVSS, org.sonatype.nexus:nexus-core)
- [CVE-2020-1943](https://cve.now/CVE-2020-1943.md): Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07. (no CVSS, Apache OFBiz)
- [CVE-2020-3847](https://cve.now/CVE-2020-3847.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3849](https://cve.now/CVE-2020-3849.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3848](https://cve.now/CVE-2020-3848.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3850](https://cve.now/CVE-2020-3850.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-10203](https://cve.now/CVE-2020-10203.md): Sonatype Nexus Repository before 3.21.2 allows XSS. (no CVSS, org.sonatype.nexus:nexus-core)
- [CVE-2020-9785](https://cve.now/CVE-2020-9785.md): Multiple memory corruption issues were addressed with improved state management. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9783](https://cve.now/CVE-2020-9783.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-9780](https://cve.now/CVE-2020-9780.md): The issue was resolved by clearing application previews when content is deleted. (no CVSS, Apple iOS)
- [CVE-2020-9784](https://cve.now/CVE-2020-9784.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple Safari)
- [CVE-2020-9781](https://cve.now/CVE-2020-9781.md): The issue was addressed by clearing website permission prompts after navigation. (no CVSS, Apple iOS)
- [CVE-2020-9773](https://cve.now/CVE-2020-9773.md): The issue was addressed with improved handling of icon caches. (no CVSS, Apple iOS)
- [CVE-2020-9770](https://cve.now/CVE-2020-9770.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS)
- [CVE-2020-9777](https://cve.now/CVE-2020-9777.md): An issue existed in the selection of video file by Mail. (no CVSS, Apple iOS)
- [CVE-2020-9775](https://cve.now/CVE-2020-9775.md): An issue existed in the handling of tabs displaying picture in picture video. (no CVSS, Apple iOS)
- [CVE-2020-9776](https://cve.now/CVE-2020-9776.md): This issue was addressed with a new entitlement. (no CVSS, Apple macOS)
- [CVE-2020-9768](https://cve.now/CVE-2020-9768.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-9769](https://cve.now/CVE-2020-9769.md): Multiple issues were addressed by updating to version 8.1.1850. (no CVSS, Apple macOS)
- [CVE-2020-3919](https://cve.now/CVE-2020-3919.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-3910](https://cve.now/CVE-2020-3910.md): A buffer overflow was addressed with improved size validation. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-3917](https://cve.now/CVE-2020-3917.md): This issue was addressed with a new entitlement. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-3914](https://cve.now/CVE-2020-3914.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-3911](https://cve.now/CVE-2020-3911.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-3916](https://cve.now/CVE-2020-3916.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2020-3913](https://cve.now/CVE-2020-3913.md): A permissions issue existed. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2020-3912](https://cve.now/CVE-2020-3912.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3909](https://cve.now/CVE-2020-3909.md): A buffer overflow was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-3908](https://cve.now/CVE-2020-3908.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3905](https://cve.now/CVE-2020-3905.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3907](https://cve.now/CVE-2020-3907.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3904](https://cve.now/CVE-2020-3904.md): Multiple memory corruption issues were addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-3902](https://cve.now/CVE-2020-3902.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-3906](https://cve.now/CVE-2020-3906.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-3901](https://cve.now/CVE-2020-3901.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-3903](https://cve.now/CVE-2020-3903.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple macOS)
- [CVE-2020-3900](https://cve.now/CVE-2020-3900.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-3895](https://cve.now/CVE-2020-3895.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-3899](https://cve.now/CVE-2020-3899.md): A memory consumption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-3894](https://cve.now/CVE-2020-3894.md): A race condition was addressed with additional validation. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-3897](https://cve.now/CVE-2020-3897.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-3892](https://cve.now/CVE-2020-3892.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3893](https://cve.now/CVE-2020-3893.md): A memory corruption issue was addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-3891](https://cve.now/CVE-2020-3891.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2020-3885](https://cve.now/CVE-2020-3885.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-3887](https://cve.now/CVE-2020-3887.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-3890](https://cve.now/CVE-2020-3890.md): The issue was addressed with improved deletion. (no CVSS, Apple iOS)
- [CVE-2020-3888](https://cve.now/CVE-2020-3888.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS)
- [CVE-2020-3883](https://cve.now/CVE-2020-3883.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-3889](https://cve.now/CVE-2020-3889.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-3884](https://cve.now/CVE-2020-3884.md): An injection issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2020-3881](https://cve.now/CVE-2020-3881.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-10868](https://cve.now/CVE-2020-10868.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10867](https://cve.now/CVE-2020-10867.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10866](https://cve.now/CVE-2020-10866.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10865](https://cve.now/CVE-2020-10865.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10864](https://cve.now/CVE-2020-10864.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10863](https://cve.now/CVE-2020-10863.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10862](https://cve.now/CVE-2020-10862.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10861](https://cve.now/CVE-2020-10861.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2020-10860](https://cve.now/CVE-2020-10860.md): An issue was discovered in Avast Antivirus before 20. (no CVSS)
- [CVE-2018-11106](https://cve.now/CVE-2018-11106.md): NETGEAR has released fixes for a pre-authentication command injection in request\_handler.php security vulnerability on the following product (no CVSS, NETGEAR WC7500 · NETGEAR WC7520 +3)
- [CVE-2019-3944](https://cve.now/CVE-2019-3944.md): Parrot ANAFI is vulnerable to Wi-Fi deauthentication attack, allowing remote and unauthenticated attackers to disconnect drone from controll (no CVSS, Parrot ANAFI)
- [CVE-2019-3945](https://cve.now/CVE-2019-3945.md): Web server running on Parrot ANAFI can be crashed due to the SDK command "Common\_CurrentDateTime" being sent to control service with larger (no CVSS, Parrot ANAFI)
- [CVE-2019-3942](https://cve.now/CVE-2019-3942.md): Advantech WebAccess 8.3.4 does not properly restrict an RPC call that allows unauthenticated, remote users to read files. (no CVSS, Advantech WebAccess)
- [CVE-2020-11455](https://cve.now/CVE-2020-11455.md): LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. (no CVSS)
- [CVE-2020-11456](https://cve.now/CVE-2020-11456.md): LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGro (no CVSS)
- [CVE-2020-11457](https://cve.now/CVE-2020-11457.md): pfSense before 2.4.5 has stored XSS in system\_usermanager\_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user. (no CVSS)
- [CVE-2020-11449](https://cve.now/CVE-2020-11449.md): An issue was discovered on Technicolor TC7337 8.89.17 devices. (no CVSS)
- [CVE-2020-10231](https://cve.now/CVE-2020-10231.md): TP-Link NC200 through 2.1.8\_Build\_171109, NC210 through 1.0.9\_Build\_171214, NC220 through 1.3.0\_Build\_180105, NC230 through 1.3.0\_Build\_1712 (no CVSS)
- [CVE-2020-7948](https://cve.now/CVE-2020-7948.md): An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. (no CVSS)
- [CVE-2020-7947](https://cve.now/CVE-2020-7947.md): An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. (no CVSS)
- [CVE-2020-5391](https://cve.now/CVE-2020-5391.md): Cross-site request forgery (CSRF) vulnerabilities exist in the Auth0 plugin before 4.0.0 for WordPress via the domain field. (no CVSS)
- [CVE-2020-6753](https://cve.now/CVE-2020-6753.md): The Login by Auth0 plugin before 4.0.0 for WordPress allows stored XSS on multiple pages, a different issue than CVE-2020-5392. (no CVSS)
- [CVE-2020-5392](https://cve.now/CVE-2020-5392.md): A stored cross-site scripting (XSS) vulnerability exists in the Auth0 plugin before 4.0.0 for WordPress via the settings page. (no CVSS)
- [CVE-2020-5548](https://cve.now/CVE-2020-5548.md): Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yam (no CVSS, Yamaha network devices)
- [CVE-2020-7263](https://cve.now/CVE-2020-7263.md): ENS configuration can be edited by attacker with local administrator permissions (CVSS 6.5, McAfee Endpoint Security (ENS) for Window)
- [CVE-2020-11445](https://cve.now/CVE-2020-11445.md): TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involv (CVSS 5.3)
- [CVE-2020-7066](https://cve.now/CVE-2020-7066.md): get\_headers() silently truncates after a null byte (CVSS 5.3, PHP Group PHP)
- [CVE-2020-7065](https://cve.now/CVE-2020-7065.md): mb\_strtolower (UTF-32LE): stack-buffer-overflow at php\_unicode\_tolower\_full (CVSS 7.4, PHP Group PHP)
- [CVE-2020-7064](https://cve.now/CVE-2020-7064.md): Use-of-uninitialized-value in exif (CVSS 6.5, PHP Group PHP)
- [CVE-2020-6096](https://cve.now/CVE-2020-6096.md): An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. (CVSS 8.1, GNU glibc)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.