CVEs published April 6, 2020
43 CVEs were published on April 6, 2020: 1 critical, 3 high.
- Published
- 43
- Critical
- 1
- High
- 3
- Medium
- 3
- Low
- 0
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- [UNKNOWN] keycloak · org.keycloak:keycloak-core
- 1
- @eivifj/dot
- 1
- adb-driver
- 1
- apiconnect-cli-plugins
- 1
- class-transformer
- 1
- compass-compile
- 1
- confinit
- 1
- Data Center Security Manager Component
- 1
- diskusage-ng
- 1
- heroku-addonpool
- 1
Critical 1
High 3
- CVE-2020-10267RVD#1489: Unprotected intelectual property in Universal Robots controller CB 3.1 across firmware versionsUniversal Robots UR3, UR5 and UR10
- CVE-2020-10266RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robotUniversal Robots URx
- CVE-2020-10264RTDE Interface allows unauthenticated reading of robot data and unauthenticated writing of registers and outputsUniversal Robots A/S Universal Robots Robot Controllers CB…
Medium, low and unrated 39
- CVE-2020-11586An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11587An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11588An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11589An Insecure Direct Object Reference issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11590An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11591An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11592An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11593An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11594An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11595An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11596A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11597An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11598An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801.
- CVE-2020-11599An issue was discovered in CIPPlanner CIPAce 6.80 Build 2016031401.
- CVE-2020-11585There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center
- CVE-2020-11581An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.
- CVE-2020-11582An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.
- CVE-2020-11580An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06.
- CVE-2020-5832Symantec Data Center Security Manager Component, prior to 6.8.2 (aka 6.8 MP2), may be susceptible to a privilege escalation vulnerability, wData Center Security Manager Component
- CVE-2020-5300Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydraory hydra · github.com/ory/hydra
- CVE-2020-11102hw/net/tulip.c in QEMU 4.2.0 has a buffer overflow during the copying of tx/rx buffers because the frame size is not validated against the r
- CVE-2020-11507An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a m
- CVE-2019-19699There is Authenticated remote code execution in Centreon Infrastructure Monitoring Software through 19.10 via Pollers misconfiguration, lead
- CVE-2020-11544An issue was discovered in Project Worlds Official Car Rental System 1.
- CVE-2020-11545Project Worlds Official Car Rental System 1 is vulnerable to multiple SQL injection issues, as demonstrated by the email and parameters (acc
- CVE-2020-9473The S.
- CVE-2020-7622HTTP Response Splittingio.jooby:jooby-netty
- CVE-2020-1728A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing g[UNKNOWN] keycloak · org.keycloak:keycloak-core
- CVE-2020-7639eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties@eivifj/dot
- CVE-2020-8004STMicroelectronics STM32F1 devices have Incorrect Access Control.
- CVE-2020-7638confinit through 0.3.0 is vulnerable to Prototype Pollution.The 'setDeepProperty' function could be tricked into adding or modifying propertconfinit
- CVE-2020-7637class-transformer before 0.3.1 allow attackers to perform Prototype Pollution.class-transformer
- CVE-2020-7636adb-driver through 0.1.8 is vulnerable to Command Injection.It allows execution of arbitrary commands via the command function.adb-driver
- CVE-2020-7635compass-compile through 0.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via tha options argument.compass-compile
- CVE-2020-7634heroku-addonpool through 0.1.15 is vulnerable to Command Injection.heroku-addonpool
- CVE-2020-7633apiconnect-cli-plugins through 6.0.1 is vulnerable to Command Injection.It allows execution of arbitrary commands via the pluginUri argumentapiconnect-cli-plugins
- CVE-2020-7632node-mpv through 1.4.3 is vulnerable to Command Injection.node-mpv
- CVE-2020-7631diskusage-ng through 0.2.4 is vulnerable to Command Injection.It allows execution of arbitrary commands via the path argument.diskusage-ng
- CVE-2020-11565An issue was discovered in the Linux kernel through 5.6.2.