CVEs published April 3, 2020
25 CVEs were published on April 3, 2020: 1 critical, 1 high.
- Published
- 25
- Critical
- 1
- High
- 1
- Medium
- 5
- Low
- 1
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- VISAM VBASE Editor · VISAM VBASE Web-Remote Module
- 5
- https://github.com/revive-adserver/revive-adserver
- 2
- Dell CPG BIOS
- 1
- Dell Isilon OneFS
- 1
- Hirschmann Automation and Control GmbH, a division of Belde…
- 1
- IBM Spectrum Scale
- 1
- mediawiki/core
- 1
- Red Hat Eclipse Che
- 1
- SUSE Linux Enterprise High Performance Computing 15-ESPO… +5
- 1
- SUSE Linux Enterprise Server
- 1
Critical 1
High 1
Medium, low and unrated 23
- CVE-2020-5348Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode.Dell CPG BIOS
- CVE-2020-5347Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability.Dell Isilon OneFS
- CVE-2020-8143An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144.https://github.com/revive-adserver/revive-adserver
- CVE-2020-8147Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remotutils-extend
- CVE-2020-8142A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144.https://github.com/revive-adserver/revive-adserver
- CVE-2020-8639An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uplo
- CVE-2020-8638A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency param
- CVE-2020-8637A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id
- CVE-2020-6994A buffer overflow vulnerability was found in some devices of Hirschmann Automation and Control HiOS and HiSecOS.Hirschmann Automation and Control GmbH, a division of Belde…
- CVE-2020-10599VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffVISAM VBASE Editor · VISAM VBASE Web-Remote Module
- CVE-2020-7000VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key fromVISAM VBASE Editor · VISAM VBASE Web-Remote Module
- CVE-2020-10601VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a locaVISAM VBASE Editor · VISAM VBASE Web-Remote Module
- CVE-2020-7004VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in eVISAM VBASE Editor · VISAM VBASE Web-Remote Module
- CVE-2020-7008VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, VISAM VBASE Editor · VISAM VBASE Web-Remote Module
- CVE-2020-10689A flaw was found in the Eclipse Che up to version 7.8.x, where it did not properly restrict access to workspace pods.Red Hat Eclipse Che
- CVE-2019-17230includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress allows unauthenticated options changes.
- CVE-2019-17231includes/theme-functions.php in the OneTone theme through 3.0.6 for WordPress has multiple stored XSS issues.
- CVE-2020-10960In MediaWiki before 1.34.1, users can add various Cascading Style Sheets (CSS) classes (which can affect what content is shown or hidden in mediawiki/core
- CVE-2020-11501GnuTLS 3.6.x before 3.6.13 uses incorrect cryptography for DTLS.
- CVE-2020-11500Zoom Client for Meetings through 4.6.9 uses the ECB mode of AES for video and audio encryption.
- CVE-2019-18905Deprecated functionality in autoyast2 automatically imports gpg keys without checking themSUSE Linux Enterprise Server
- CVE-2019-18904Migrations requests can cause DoS on rmtSUSE Linux Enterprise High Performance Computing 15-ESPO… +5
- CVE-2020-5283XSS vulnerability in CVS show_subdir_lastmod supportviewvc