CVEs published April 8, 2020
139 CVEs were published on April 8, 2020: 2 critical, 16 high. 1 is now in CISA KEV.
- Published
- 139
- Critical
- 2
- High
- 16
- Medium
- 28
- Low
- 3
- Unrated
- 90
- Now in CISA KEV
- 1
- Fix available
- 32
Most affected products
- Juniper Networks Junos OS
- 14
- IBM Security Information Queue
- 6
- Juniper Networks Junos OS Evolved
- 6
- IBM Rational DOORS Next Generation
- 4
- github.com/argoproj/argo-cd
- 3
- IBM Rational Quality Manager
- 3
- Palo Alto Networks Global Protect Agent
- 3
- Secdo
- 3
- Amcrest
- 2
- Palo Alto Networks PAN-OS
- 2
Critical 2
High 16
- CVE-2020-1639Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.Juniper Networks Junos OS
- CVE-2020-1638Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.Juniper Networks Junos OS
- CVE-2020-1637Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerabilityJuniper Networks Junos OS
- CVE-2020-1634Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset.Juniper Networks Junos OS
- CVE-2020-1627Junos OS: vMX and MX150: Denial of Service vulnerability in packet processingJuniper Networks Junos OS
- CVE-2020-1626Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packetsJuniper Networks Junos OS Evolved
- CVE-2020-1617Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.Juniper Networks Junos OS
- CVE-2020-1613Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.Juniper Networks Junos OS
- CVE-2020-1992PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalationPalo Alto Networks PAN-OS
- CVE-2020-1991Traps: Insecure temporary file vulnerability may allow privilege escalation on WindowsPalo Alto Networks Traps · Palo Alto Networks Cortex XDR
- CVE-2020-1990PAN-OS: Buffer overflow in the management serverPalo Alto Networks PAN-OS
- CVE-2020-1989Global Protect Agent: Incorrect privilege assignment allows local privilege escalationPalo Alto Networks Global Protect Agent
- CVE-2020-1985Secdo: Incorrect Default PermissionsSecdo
- CVE-2020-1984Secdo: Privilege escalation via hardcoded script pathSecdo
- CVE-2020-5735Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777.Amcrest
- CVE-2019-15789Microk8s Privilege Escalation VulnerabilityCanonical MicroK8s
Medium, low and unrated 121
- CVE-2019-20637An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.
- CVE-2020-11650An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1.
- CVE-2020-2732A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabledOracle Linux
- CVE-2020-1885Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users tFacebook Oculus Desktop
- CVE-2020-8828As of v1.5.0, the default admin password is set to the argocd-server pod name.github.com/argoproj/argo-cd
- CVE-2020-8827As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce meagithub.com/argoproj/argo-cd
- CVE-2020-8826As of v1.5.0, the Argo web interface authentication system issued immutable tokens.
- CVE-2020-1630Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change.Juniper Networks Junos OS
- CVE-2020-1629Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message.Juniper Networks Junos OS
- CVE-2020-1628Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfacesJuniper Networks Junos OS
- CVE-2020-1625Junos OS: Kernel memory leak in virtual-memory due to interface flapsJuniper Networks Junos OS
- CVE-2020-1624Junos OS Evolved: objmon logs may leak sensitive informationJuniper Networks Junos OS Evolved
- CVE-2020-1623Junos OS Evolved: ev.ops file may leak sensitive informationJuniper Networks Junos OS Evolved
- CVE-2020-1622Junos OS Evolved: EvoSharedObjStore may leak sensitive informationJuniper Networks Junos OS Evolved
- CVE-2020-1621Junos OS Evolved: Configd leaks hashes via stream and is world readableJuniper Networks Junos OS Evolved
- CVE-2020-1620Junos OS Evolved: Configd leaks hashes via log file and is world readableJuniper Networks Junos OS Evolved
- CVE-2020-1619Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE.Juniper Networks Junos OS
- CVE-2020-1618Junos OS: EX and QFX Series: Console port authentication bypass vulnerabilityJuniper Networks Junos OS
- CVE-2020-1616JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service.Juniper Networks JATP
- CVE-2020-1988Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerabilityPalo Alto Networks Global Protect Agent
- CVE-2020-1987Global Protect Agent: VPN cookie local information disclosurePalo Alto Networks Global Protect Agent
- CVE-2020-1986Secdo: Local authenticated users can cause Windows system crashSecdo
- CVE-2020-1978VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMsPalo Alto Networks VM-Series Plugin
- CVE-2020-10814A buffer overflow vulnerability in Code::Blocks 17.12 allows an attacker to execute arbitrary code via a crafted project file.
- CVE-2020-10975GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized users on the vulnerability feedback page.
- CVE-2020-10976GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget.
- CVE-2020-10977GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects.
- CVE-2020-10978GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private project through Web-UI and
- CVE-2020-10979GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users.
- CVE-2020-10980GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration.
- CVE-2020-10981GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project.
- CVE-2018-21055An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software.
- CVE-2018-21054An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8
- CVE-2018-21053An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2018-21056An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2018-21057An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, and P(9.0) (Exynos chipsets) software.
- CVE-2018-21058An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software.
- CVE-2018-21052An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software.
- CVE-2018-21059An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21051An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software.
- CVE-2018-21050An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software.
- CVE-2020-11576Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames ogithub.com/argoproj/argo-cd
- CVE-2018-21060An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21049An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software.
- CVE-2018-21048An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2018-21061An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) software.
- CVE-2020-10263An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4.
- CVE-2018-21062An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21063An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software.
- CVE-2018-21064An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21065An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software.
- CVE-2020-10262An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10.
- CVE-2018-21066An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software.
- CVE-2018-21067An issue was discovered on Samsung mobile devices with M(6.0) software.
- CVE-2018-21068An issue was discovered on Samsung mobile devices with O(8.0) software.
- CVE-2018-21069An issue was discovered on Samsung mobile devices with N(7.x) (MediaTek chipsets) software.
- CVE-2018-21070An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software.
- CVE-2018-21071An issue was discovered on Samsung mobile devices with M(6.0) software.
- CVE-2018-21072An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software.
- CVE-2018-21073An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8, Note 8).
- CVE-2018-21074An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software.
- CVE-2018-21047An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2018-21075An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21076An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software.
- CVE-2018-21046An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2018-21077An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software.
- CVE-2018-21045An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2018-21044An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) software.
- CVE-2018-21043An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software.
- CVE-2018-21042An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2018-21078An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) software.
- CVE-2018-21079An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software.
- CVE-2018-21080An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2018-21041An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2020-11000Improper URL validation in GreenBrowserluchua-bc GreenBrowser
- CVE-2018-21040An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software.
- CVE-2018-21039An issue was discovered on Samsung mobile devices with N(7.0) software.
- CVE-2018-21038An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2020-11603An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software.
- CVE-2020-11607An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-11606An issue was discovered on Samsung mobile devices with Q(10.0) software.
- CVE-2020-11605An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-11604An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software.
- CVE-2020-11602An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-11601An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-11600An issue was discovered on Samsung mobile devices with Q(10.0) software.
- CVE-2018-21081An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2018-21082An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2018-21083An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos or Qualcomm chipsets) software.
- CVE-2018-21084An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.x) software.
- CVE-2018-21085An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software.
- CVE-2018-21086An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software.
- CVE-2018-21087An issue was discovered on Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software.
- CVE-2018-21088An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2020-4291IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized uIBM Security Information Queue
- CVE-2020-4290IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuraIBM Security Information Queue
- CVE-2020-4289IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive informaIBM Security Information Queue
- CVE-2020-4284IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized uIBM Security Information Queue
- CVE-2020-4282IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorizedIBM Security Information Queue
- CVE-2020-4252IBM DOORS Next Generation (DNG/RRC) 6.0.2.IBM Rational DOORS Next Generation
- CVE-2020-4164IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errorIBM Security Information Queue
- CVE-2019-4746IBM DOORS Next Generation (DNG/RRC) 6.0.2.IBM Rational DOORS Next Generation
- CVE-2019-4740IBM DOORS Next Generation (DNG/RRC) 6.0.2.IBM Rational DOORS Next Generation
- CVE-2019-4737IBM DOORS Next Generation (DNG/RRC) 6.0.2.IBM Rational DOORS Next Generation
- CVE-2019-4603IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them apIBM Rational Quality Manager
- CVE-2019-4602IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2019-4601IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that IBM Rational Quality Manager
- CVE-2019-20636In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input_set_
- CVE-2018-21089An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software.
- CVE-2018-21090An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets).
- CVE-2018-21091An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software.
- CVE-2018-21092An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software.
- CVE-2017-18643An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software.
- CVE-2017-18644An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software.
- CVE-2017-18645An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software.
- CVE-2017-18646An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software.
- CVE-2020-5736Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777.Amcrest
- CVE-2020-5549Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver.Plat'Home Co. EasyBlocks IPv6
- CVE-2020-5550Session fixation vulnerability in EasyBlocks IPv6 Ver.Plat'Home Co. EasyBlocks IPv6
- CVE-2020-10633A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0).eWON Flexy and Cosy
- CVE-2020-11653An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.