# CVEs published 2020-04-04

8 CVEs were published on April 4, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-11548](https://cve.now/CVE-2020-11548.md): The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. (no CVSS)
- [CVE-2020-11547](https://cve.now/CVE-2020-11547.md): PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server it (no CVSS)
- [CVE-2020-11542](https://cve.now/CVE-2020-11542.md): 3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the clie (no CVSS)
- [CVE-2020-11533](https://cve.now/CVE-2020-11533.md): Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying mate (no CVSS)
- [CVE-2020-11529](https://cve.now/CVE-2020-11529.md): Common/Grav.php in Grav before 1.7 has an Open Redirect. (no CVSS, getgrav/grav)
- [CVE-2020-11528](https://cve.now/CVE-2020-11528.md): bit2spr 1992-06-07 has a stack-based buffer overflow (129-byte write) in conv\_bitmap in bit2spr.c via a long line in a bitmap file. (no CVSS)
- [CVE-2020-11527](https://cve.now/CVE-2020-11527.md): In Zoho ManageEngine OpManager before 12.4.181, an unauthenticated remote attacker can send a specially crafted URI to read arbitrary files. (no CVSS)
- [CVE-2020-11518](https://cve.now/CVE-2020-11518.md): Zoho ManageEngine ADSelfService Plus before 5815 allows unauthenticated remote code execution. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.