# CVEs published 2020-04-07

126 CVEs were published on April 7, 2020: 0 critical, 1 high. Days are UTC.

- [CVE-2020-10366](https://cve.now/CVE-2020-10366.md): LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365. (no CVSS)
- [CVE-2020-11626](https://cve.now/CVE-2020-11626.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11627](https://cve.now/CVE-2020-11627.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11628](https://cve.now/CVE-2020-11628.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11629](https://cve.now/CVE-2020-11629.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11630](https://cve.now/CVE-2020-11630.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11631](https://cve.now/CVE-2020-11631.md): An issue was discovered in EJBCA before 6.15.2.6 and 7.x before 7.3.1.2. (no CVSS)
- [CVE-2020-11543](https://cve.now/CVE-2020-11543.md): OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the server. (no CVSS)
- [CVE-2020-11620](https://cve.now/CVE-2020-11620.md): FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.co (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2020-11619](https://cve.now/CVE-2020-11619.md): FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springfra (no CVSS, com.fasterxml.jackson.core:jackson-databind)
- [CVE-2020-9286](https://cve.now/CVE-2020-9286.md): An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions suc (no CVSS, FortiADC)
- [CVE-2020-11509](https://cve.now/CVE-2020-11509.md): An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arb (no CVSS)
- [CVE-2020-11508](https://cve.now/CVE-2020-11508.md): An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or re (no CVSS)
- [CVE-2020-6647](https://cve.now/CVE-2020-6647.md): An improper neutralization of input vulnerability in the dashboard of FortiADC may allow an authenticated attacker to perform a cross site s (no CVSS, Fortinet FortiADC)
- [CVE-2020-11612](https://cve.now/CVE-2020-11612.md): The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. (no CVSS, io.netty:netty-handler)
- [CVE-2013-7488](https://cve.now/CVE-2013-7488.md): perl-Convert-ASN1 (aka the Convert::ASN1 module for Perl) through 0.27 allows remote attackers to cause an infinite loop via unexpected inpu (no CVSS)
- [CVE-2015-9544](https://cve.now/CVE-2015-9544.md): An issue was discovered in xdLocalStorage through 2.0.5. (no CVSS, xdlocalstorage)
- [CVE-2020-11610](https://cve.now/CVE-2020-11610.md): An issue was discovered in xdLocalStorage through 2.0.5. (no CVSS, xdlocalstorage)
- [CVE-2020-11611](https://cve.now/CVE-2020-11611.md): An issue was discovered in xdLocalStorage through 2.0.5. (no CVSS, xdlocalstorage)
- [CVE-2015-9545](https://cve.now/CVE-2015-9545.md): An issue was discovered in xdLocalStorage through 2.0.5. (no CVSS, xdlocalstorage)
- [CVE-2019-17657](https://cve.now/CVE-2019-17657.md): An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiMa (no CVSS, Fortinet FortiSwitch · FortiAnalyzer +2)
- [CVE-2020-6974](https://cve.now/CVE-2020-6974.md): Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to rest (no CVSS, Honeywell Notifier Web Server)
- [CVE-2019-13559](https://cve.now/CVE-2019-13559.md): GE Mark VIe Controller is shipped with pre-configured hard-coded credentials that may allow root-user access to the controller. (no CVSS, GE Mark VIe Controller)
- [CVE-2019-13554](https://cve.now/CVE-2019-13554.md): GE Mark VIe Controller has an unsecured Telnet protocol that may allow a user to create an authenticated session using generic default crede (no CVSS, GE Mark VIe Controller)
- [CVE-2020-11516](https://cve.now/CVE-2020-11516.md): Stored XSS in the Contact Form 7 Datepicker plugin through 2.6.0 for WordPress allows authenticated attackers with minimal permissions to sa (no CVSS)
- [CVE-2020-11515](https://cve.now/CVE-2020-11515.md): The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external (no CVSS)
- [CVE-2020-11514](https://cve.now/CVE-2020-11514.md): The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, includin (no CVSS)
- [CVE-2020-9514](https://cve.now/CVE-2020-9514.md): An issue was discovered in the IMPress for IDX Broker plugin before 2.6.2 for WordPress. (no CVSS)
- [CVE-2020-11512](https://cve.now/CVE-2020-11512.md): Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal (subscriber-level) permis (no CVSS)
- [CVE-2020-11609](https://cve.now/CVE-2020-11609.md): An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. (no CVSS)
- [CVE-2017-18647](https://cve.now/CVE-2017-18647.md): An issue was discovered on Samsung mobile devices with M(6,x) and N(7.0) software. (no CVSS)
- [CVE-2017-18648](https://cve.now/CVE-2017-18648.md): An issue was discovered on Samsung mobile devices with KK(4.4.x), L(5.x), M(6.x), and N(7.x) software. (no CVSS)
- [CVE-2017-18649](https://cve.now/CVE-2017-18649.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS)
- [CVE-2017-18650](https://cve.now/CVE-2017-18650.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS)
- [CVE-2017-18651](https://cve.now/CVE-2017-18651.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. (no CVSS)
- [CVE-2017-18652](https://cve.now/CVE-2017-18652.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18653](https://cve.now/CVE-2017-18653.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18654](https://cve.now/CVE-2017-18654.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0, 7.1) software. (no CVSS)
- [CVE-2017-18655](https://cve.now/CVE-2017-18655.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18656](https://cve.now/CVE-2017-18656.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18657](https://cve.now/CVE-2017-18657.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18658](https://cve.now/CVE-2017-18658.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2017-18659](https://cve.now/CVE-2017-18659.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18660](https://cve.now/CVE-2017-18660.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2020-5302](https://cve.now/CVE-2020-5302.md): unprivileged user can access priviledged action in MH-WikiBot (CVSS 8.2, examknow MH-WikiBot)
- [CVE-2017-18661](https://cve.now/CVE-2017-18661.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18662](https://cve.now/CVE-2017-18662.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18663](https://cve.now/CVE-2017-18663.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS)
- [CVE-2017-18664](https://cve.now/CVE-2017-18664.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. (no CVSS)
- [CVE-2017-18665](https://cve.now/CVE-2017-18665.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2019-4393](https://cve.now/CVE-2019-4393.md): HCL AppScan Standard is vulnerable to excessive authorization attempts (no CVSS, HCL AppScan Standard Edition)
- [CVE-2019-4391](https://cve.now/CVE-2019-4391.md): HCL AppScan Standard is vulnerable to XML External Entity Injection (XXE) attack when processing XML data (no CVSS, HCL AppScan Standard Edition)
- [CVE-2017-18666](https://cve.now/CVE-2017-18666.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18667](https://cve.now/CVE-2017-18667.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18668](https://cve.now/CVE-2017-18668.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2017-18669](https://cve.now/CVE-2017-18669.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS)
- [CVE-2017-18670](https://cve.now/CVE-2017-18670.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. (no CVSS)
- [CVE-2017-18671](https://cve.now/CVE-2017-18671.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18672](https://cve.now/CVE-2017-18672.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2017-18673](https://cve.now/CVE-2017-18673.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS)
- [CVE-2017-18674](https://cve.now/CVE-2017-18674.md): An issue was discovered on Samsung mobile devices with N(7.0) software. (no CVSS)
- [CVE-2017-18675](https://cve.now/CVE-2017-18675.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) (Exynos7420 or Exynox8890 chipsets) software. (no CVSS)
- [CVE-2017-18676](https://cve.now/CVE-2017-18676.md): An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm chipsets) software. (no CVSS)
- [CVE-2017-18677](https://cve.now/CVE-2017-18677.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. (no CVSS)
- [CVE-2017-18678](https://cve.now/CVE-2017-18678.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. (no CVSS)
- [CVE-2020-11561](https://cve.now/CVE-2020-11561.md): In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as (no CVSS)
- [CVE-2017-18679](https://cve.now/CVE-2017-18679.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2017-18680](https://cve.now/CVE-2017-18680.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (tablets) software. (no CVSS)
- [CVE-2017-18681](https://cve.now/CVE-2017-18681.md): An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chipsets). (no CVSS)
- [CVE-2017-18682](https://cve.now/CVE-2017-18682.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2017-18683](https://cve.now/CVE-2017-18683.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. (no CVSS)
- [CVE-2017-18684](https://cve.now/CVE-2017-18684.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. (no CVSS)
- [CVE-2017-18685](https://cve.now/CVE-2017-18685.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. (no CVSS)
- [CVE-2017-18686](https://cve.now/CVE-2017-18686.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) software. (no CVSS)
- [CVE-2017-18687](https://cve.now/CVE-2017-18687.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2017-18688](https://cve.now/CVE-2017-18688.md): An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2017-18689](https://cve.now/CVE-2017-18689.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos5433, Exynos7420, or Exynos7870 chipsets) software. (no CVSS)
- [CVE-2017-18690](https://cve.now/CVE-2017-18690.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) (Exynos54xx, Exynos7420, Exynos8890, or Exyno (no CVSS)
- [CVE-2017-18691](https://cve.now/CVE-2017-18691.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos8890 chipsets) software. (no CVSS)
- [CVE-2017-18692](https://cve.now/CVE-2017-18692.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 c (no CVSS)
- [CVE-2017-18693](https://cve.now/CVE-2017-18693.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2017-18694](https://cve.now/CVE-2017-18694.md): An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). (no CVSS)
- [CVE-2017-18695](https://cve.now/CVE-2017-18695.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2020-11608](https://cve.now/CVE-2020-11608.md): An issue was discovered in the Linux kernel before 5.6.1. (no CVSS)
- [CVE-2017-18696](https://cve.now/CVE-2017-18696.md): An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. (no CVSS)
- [CVE-2016-11025](https://cve.now/CVE-2016-11025.md): An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). (no CVSS)
- [CVE-2016-11026](https://cve.now/CVE-2016-11026.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. (no CVSS)
- [CVE-2016-11027](https://cve.now/CVE-2016-11027.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2016-11028](https://cve.now/CVE-2016-11028.md): An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). (no CVSS)
- [CVE-2016-11029](https://cve.now/CVE-2016-11029.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.0) software. (no CVSS)
- [CVE-2016-11030](https://cve.now/CVE-2016-11030.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. (no CVSS)
- [CVE-2016-11031](https://cve.now/CVE-2016-11031.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. (no CVSS)
- [CVE-2016-11032](https://cve.now/CVE-2016-11032.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2016-11033](https://cve.now/CVE-2016-11033.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2016-11034](https://cve.now/CVE-2016-11034.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. (no CVSS)
- [CVE-2016-11035](https://cve.now/CVE-2016-11035.md): An issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP chipsets). (no CVSS)
- [CVE-2016-11036](https://cve.now/CVE-2016-11036.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2020-7618](https://cve.now/CVE-2020-7618.md): sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.proto (no CVSS, sds)
- [CVE-2020-7614](https://cve.now/CVE-2020-7614.md): npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any (no CVSS, npm-programmatic)
- [CVE-2020-7613](https://cve.now/CVE-2020-7613.md): clamscan through 1.2.0 is vulnerable to Command Injection. (no CVSS, clamscan)
- [CVE-2016-11038](https://cve.now/CVE-2016-11038.md): An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). (no CVSS)
- [CVE-2020-7616](https://cve.now/CVE-2020-7616.md): express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. (no CVSS, express-mock-middleware)
- [CVE-2020-7615](https://cve.now/CVE-2020-7615.md): fsa through 0.5.1 is vulnerable to Command Injection. (no CVSS, fsa)
- [CVE-2016-11039](https://cve.now/CVE-2016-11039.md): An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. (no CVSS)
- [CVE-2016-11040](https://cve.now/CVE-2016-11040.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014\_L\_ESS support) software. (no CVSS)
- [CVE-2020-5734](https://cve.now/CVE-2020-5734.md): Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'Si (no CVSS, SolarWinds Dameware)
- [CVE-2016-11041](https://cve.now/CVE-2016-11041.md): An issue was discovered on Samsung mobile devices with KK(4.4) software. (no CVSS)
- [CVE-2016-11042](https://cve.now/CVE-2016-11042.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. (no CVSS)
- [CVE-2016-11043](https://cve.now/CVE-2016-11043.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS)
- [CVE-2016-11044](https://cve.now/CVE-2016-11044.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. (no CVSS)
- [CVE-2016-11045](https://cve.now/CVE-2016-11045.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. (no CVSS)
- [CVE-2016-11046](https://cve.now/CVE-2016-11046.md): An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. (no CVSS)
- [CVE-2016-11047](https://cve.now/CVE-2016-11047.md): An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. (no CVSS)
- [CVE-2016-11048](https://cve.now/CVE-2016-11048.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. (no CVSS)
- [CVE-2016-11049](https://cve.now/CVE-2016-11049.md): An issue was discovered on Samsung mobile devices with software through 2016-01-16 (Shannon333/308/310 chipsets). (no CVSS)
- [CVE-2016-11050](https://cve.now/CVE-2016-11050.md): An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. (no CVSS)
- [CVE-2016-11052](https://cve.now/CVE-2016-11052.md): An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. (no CVSS)
- [CVE-2016-11053](https://cve.now/CVE-2016-11053.md): An issue was discovered on Samsung mobile devices with software through 2015-11-11 (supporting FRP/RL). (no CVSS)
- [CVE-2020-2175](https://cve.now/CVE-2020-2175.md): Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a sto (no CVSS, Jenkins project Jenkins FitNesse Plugin · org.jenkins-ci.pl…)
- [CVE-2020-2176](https://cve.now/CVE-2020-2176.md): Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service (no CVSS, Jenkins project Jenkins useMango Runner Plugin · it.infuse.…)
- [CVE-2020-2173](https://cve.now/CVE-2020-2173.md): Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, r (no CVSS, Jenkins project Jenkins Gatling Plugin · org.jenkins-ci.plu…)
- [CVE-2020-2174](https://cve.now/CVE-2020-2174.md): Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a (no CVSS, Jenkins project Jenkins AWSEB Deployment Plugin · br.com.in…)
- [CVE-2020-2172](https://cve.now/CVE-2020-2172.md): Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. (no CVSS, Jenkins project Jenkins Code Coverage API Plugin · io.jenki…)
- [CVE-2020-6171](https://cve.now/CVE-2020-6171.md): A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject ar (no CVSS)
- [CVE-2020-8096](https://cve.now/CVE-2020-8096.md): Untrusted Search Path Vulnerability in High-Level Antimalware SDK (CVSS 6.3, Bitdefender High-Level Antimalware SDK for Windows)
- [CVE-2020-11560](https://cve.now/CVE-2020-11560.md): NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.