# CVEs published 2020-04-08 139 CVEs were published on April 8, 2020: 2 critical, 16 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2019-20637](https://cve.now/CVE-2019-20637.md): An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1. (no CVSS) - [CVE-2020-11650](https://cve.now/CVE-2020-11650.md): An issue was discovered in iXsystems FreeNAS (and TrueNAS) 11.2 before 11.2-u8 and 11.3 before 11.3-U1. (no CVSS) - [CVE-2020-2732](https://cve.now/CVE-2020-2732.md): A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled (CVSS 5.8, Oracle Linux) - [CVE-2020-1885](https://cve.now/CVE-2020-1885.md): Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users t (no CVSS, Facebook Oculus Desktop) - [CVE-2020-8828](https://cve.now/CVE-2020-8828.md): As of v1.5.0, the default admin password is set to the argocd-server pod name. (no CVSS, github.com/argoproj/argo-cd) - [CVE-2020-8827](https://cve.now/CVE-2020-8827.md): As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce mea (no CVSS, github.com/argoproj/argo-cd) - [CVE-2020-8826](https://cve.now/CVE-2020-8826.md): As of v1.5.0, the Argo web interface authentication system issued immutable tokens. (no CVSS) - [CVE-2020-1639](https://cve.now/CVE-2020-1639.md): Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core. (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2020-1638](https://cve.now/CVE-2020-1638.md): Junos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart. (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2020-1637](https://cve.now/CVE-2020-1637.md): Junos OS: SRX Series: Unified Access Control (UAC) bypass vulnerability (CVSS 7.2, Juniper Networks Junos OS) - [CVE-2020-1634](https://cve.now/CVE-2020-1634.md): Junos OS: High-End SRX Series: Multicast traffic might cause all FPCs to reset. (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2020-1630](https://cve.now/CVE-2020-1630.md): Junos OS: Privilege escalation vulnerability in dual REs, VC or HA cluster may allow unauthorized configuration change. (CVSS 5.0, Juniper Networks Junos OS) - [CVE-2020-1629](https://cve.now/CVE-2020-1629.md): Junos OS: A race condition vulnerability may cause RPD daemon to crash when processing a BGP NOTIFICATION message. (CVSS 5.9, Juniper Networks Junos OS) - [CVE-2020-1628](https://cve.now/CVE-2020-1628.md): Junos OS: EX4300: Traffic from the network internal to the device (128.0.0.0) may be forwarded to egress interfaces (CVSS 5.3, Juniper Networks Junos OS) - [CVE-2020-1627](https://cve.now/CVE-2020-1627.md): Junos OS: vMX and MX150: Denial of Service vulnerability in packet processing (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2020-1626](https://cve.now/CVE-2020-1626.md): Junos OS Evolved: Denial of Service vulnerability in processing high rate of specific packets (CVSS 7.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1625](https://cve.now/CVE-2020-1625.md): Junos OS: Kernel memory leak in virtual-memory due to interface flaps (CVSS 6.5, Juniper Networks Junos OS) - [CVE-2020-1624](https://cve.now/CVE-2020-1624.md): Junos OS Evolved: objmon logs may leak sensitive information (CVSS 5.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1623](https://cve.now/CVE-2020-1623.md): Junos OS Evolved: ev.ops file may leak sensitive information (CVSS 5.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1622](https://cve.now/CVE-2020-1622.md): Junos OS Evolved: EvoSharedObjStore may leak sensitive information (CVSS 5.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1621](https://cve.now/CVE-2020-1621.md): Junos OS Evolved: Configd leaks hashes via stream and is world readable (CVSS 5.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1620](https://cve.now/CVE-2020-1620.md): Junos OS Evolved: Configd leaks hashes via log file and is world readable (CVSS 5.5, Juniper Networks Junos OS Evolved) - [CVE-2020-1619](https://cve.now/CVE-2020-1619.md): Junos OS: QFX10K Series, EX9200 Series, MX Series, PTX Series: Privilege escalation vulnerability in NG-RE. (CVSS 6.0, Juniper Networks Junos OS) - [CVE-2020-1618](https://cve.now/CVE-2020-1618.md): Junos OS: EX and QFX Series: Console port authentication bypass vulnerability (CVSS 6.3, Juniper Networks Junos OS) - [CVE-2020-1617](https://cve.now/CVE-2020-1617.md): Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot. (CVSS 7.5, Juniper Networks Junos OS) - [CVE-2020-1616](https://cve.now/CVE-2020-1616.md): JATP Series: JATP Is susceptible to slow brute force attacks on the SSH service. (CVSS 5.3, Juniper Networks JATP) - [CVE-2020-1615](https://cve.now/CVE-2020-1615.md): Junos OS: vMX: Default credentials supplied in vMX configuration (CVSS 9.8, Juniper Networks Junos OS) - [CVE-2020-1614](https://cve.now/CVE-2020-1614.md): NFX250 Series: Hardcoded credentials in the vSRX VNF instance. (CVSS 10.0, Juniper Networks NFX Series Network Services Platform) - [CVE-2020-1613](https://cve.now/CVE-2020-1613.md): Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement. (CVSS 8.6, Juniper Networks Junos OS) - [CVE-2020-1992](https://cve.now/CVE-2020-1992.md): PAN-OS on PA-7000 Series: Varrcvr daemon network-based denial of service or privilege escalation (CVSS 8.1, Palo Alto Networks PAN-OS) - [CVE-2020-1991](https://cve.now/CVE-2020-1991.md): Traps: Insecure temporary file vulnerability may allow privilege escalation on Windows (CVSS 7.8, Palo Alto Networks Traps ยท Palo Alto Networks Cortex XDR) - [CVE-2020-1990](https://cve.now/CVE-2020-1990.md): PAN-OS: Buffer overflow in the management server (CVSS 7.2, Palo Alto Networks PAN-OS) - [CVE-2020-1989](https://cve.now/CVE-2020-1989.md): Global Protect Agent: Incorrect privilege assignment allows local privilege escalation (CVSS 7.0, Palo Alto Networks Global Protect Agent) - [CVE-2020-1988](https://cve.now/CVE-2020-1988.md): Global Protect Agent: Local privilege escalation due to an unquoted search path vulnerability (CVSS 4.2, Palo Alto Networks Global Protect Agent) - [CVE-2020-1987](https://cve.now/CVE-2020-1987.md): Global Protect Agent: VPN cookie local information disclosure (CVSS 3.9, Palo Alto Networks Global Protect Agent) - [CVE-2020-1986](https://cve.now/CVE-2020-1986.md): Secdo: Local authenticated users can cause Windows system crash (CVSS 5.5, Secdo) - [CVE-2020-1985](https://cve.now/CVE-2020-1985.md): Secdo: Incorrect Default Permissions (CVSS 7.8, Secdo) - [CVE-2020-1984](https://cve.now/CVE-2020-1984.md): Secdo: Privilege escalation via hardcoded script path (CVSS 7.8, Secdo) - [CVE-2020-1978](https://cve.now/CVE-2020-1978.md): VM-Series on Microsoft Azure: Inadvertent collection of credentials in Tech support files on HA configured VMs (CVSS 5.8, Palo Alto Networks VM-Series Plugin) - [CVE-2020-10814](https://cve.now/CVE-2020-10814.md): A buffer overflow vulnerability in Code::Blocks 17.12 allows an attacker to execute arbitrary code via a crafted project file. (no CVSS) - [CVE-2020-10975](https://cve.now/CVE-2020-10975.md): GitLab EE/CE 10.8 to 12.9 is leaking metadata and comments on vulnerabilities to unauthorized users on the vulnerability feedback page. (no CVSS) - [CVE-2020-10976](https://cve.now/CVE-2020-10976.md): GitLab EE/CE 8.17 to 12.9 is vulnerable to information leakage when querying a merge request widget. (no CVSS) - [CVE-2020-10977](https://cve.now/CVE-2020-10977.md): GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. (no CVSS) - [CVE-2020-10978](https://cve.now/CVE-2020-10978.md): GitLab EE/CE 8.11 to 12.9 is leaking information on Issues opened in a public project and then moved to a private project through Web-UI and (no CVSS) - [CVE-2020-10979](https://cve.now/CVE-2020-10979.md): GitLab EE/CE 11.10 to 12.9 is leaking information on restricted CI pipelines metrics to unauthorized users. (no CVSS) - [CVE-2020-10980](https://cve.now/CVE-2020-10980.md): GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration. (no CVSS) - [CVE-2020-10981](https://cve.now/CVE-2020-10981.md): GitLab EE/CE 9.0 to 12.9 allows a maintainer to modify other maintainers' pipeline trigger descriptions within the same project. (no CVSS) - [CVE-2018-21055](https://cve.now/CVE-2018-21055.md): An issue was discovered on Samsung mobile devices with N(7.0) (Qualcomm models using MSM8996 chipsets) software. (no CVSS) - [CVE-2018-21054](https://cve.now/CVE-2018-21054.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x) and O(8.x) except exynos9610/9820 in all Platforms, M(6.0) except MSM8 (no CVSS) - [CVE-2018-21053](https://cve.now/CVE-2018-21053.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2018-21056](https://cve.now/CVE-2018-21056.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2018-21057](https://cve.now/CVE-2018-21057.md): An issue was discovered on Samsung mobile devices with N(7.x) O(8.x, and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21058](https://cve.now/CVE-2018-21058.md): An issue was discovered on Samsung mobile devices with N(7.0), O(8.0) (exynos7420 or Exynos 8890/8996 chipsets) software. (no CVSS) - [CVE-2018-21052](https://cve.now/CVE-2018-21052.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21059](https://cve.now/CVE-2018-21059.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21051](https://cve.now/CVE-2018-21051.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21050](https://cve.now/CVE-2018-21050.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. (no CVSS) - [CVE-2020-11576](https://cve.now/CVE-2020-11576.md): Fixed in v1.5.1, Argo version v1.5.0 was vulnerable to a user-enumeration vulnerability which allowed attackers to determine the usernames o (no CVSS, github.com/argoproj/argo-cd) - [CVE-2018-21060](https://cve.now/CVE-2018-21060.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21049](https://cve.now/CVE-2018-21049.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.X) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21048](https://cve.now/CVE-2018-21048.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2018-21061](https://cve.now/CVE-2018-21061.md): An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) software. (no CVSS) - [CVE-2020-10263](https://cve.now/CVE-2020-10263.md): An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. (no CVSS) - [CVE-2018-21062](https://cve.now/CVE-2018-21062.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21063](https://cve.now/CVE-2018-21063.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21064](https://cve.now/CVE-2018-21064.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21065](https://cve.now/CVE-2018-21065.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. (no CVSS) - [CVE-2020-10262](https://cve.now/CVE-2020-10262.md): An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. (no CVSS) - [CVE-2018-21066](https://cve.now/CVE-2018-21066.md): An issue was discovered on Samsung mobile devices with M(6.0) (Exynos or MediaTek chipsets) software. (no CVSS) - [CVE-2018-21067](https://cve.now/CVE-2018-21067.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS) - [CVE-2018-21068](https://cve.now/CVE-2018-21068.md): An issue was discovered on Samsung mobile devices with O(8.0) software. (no CVSS) - [CVE-2018-21069](https://cve.now/CVE-2018-21069.md): An issue was discovered on Samsung mobile devices with N(7.x) (MediaTek chipsets) software. (no CVSS) - [CVE-2018-21070](https://cve.now/CVE-2018-21070.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.0) devices (MSM8998 or SDM845 chipsets) software. (no CVSS) - [CVE-2018-21071](https://cve.now/CVE-2018-21071.md): An issue was discovered on Samsung mobile devices with M(6.0) software. (no CVSS) - [CVE-2018-21072](https://cve.now/CVE-2018-21072.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos chipsets) software. (no CVSS) - [CVE-2018-21073](https://cve.now/CVE-2018-21073.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) (Galaxy S9+, Galaxy S9, Galaxy S8+, Galaxy S8, Note 8). (no CVSS) - [CVE-2018-21074](https://cve.now/CVE-2018-21074.md): An issue was discovered on Samsung mobile devices with M(6.x) (Exynos or Qualcomm chipsets) software. (no CVSS) - [CVE-2018-21047](https://cve.now/CVE-2018-21047.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2018-21075](https://cve.now/CVE-2018-21075.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21076](https://cve.now/CVE-2018-21076.md): An issue was discovered on Samsung mobile devices with N(7.x) (Exynos8890/8895 chipsets) software. (no CVSS) - [CVE-2018-21046](https://cve.now/CVE-2018-21046.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2018-21077](https://cve.now/CVE-2018-21077.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.x) software. (no CVSS) - [CVE-2018-21045](https://cve.now/CVE-2018-21045.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2018-21044](https://cve.now/CVE-2018-21044.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.0) software. (no CVSS) - [CVE-2018-21043](https://cve.now/CVE-2018-21043.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. (no CVSS) - [CVE-2018-21042](https://cve.now/CVE-2018-21042.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2018-21078](https://cve.now/CVE-2018-21078.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) software. (no CVSS) - [CVE-2018-21079](https://cve.now/CVE-2018-21079.md): An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), N(7.x), and O(8.0) software. (no CVSS) - [CVE-2018-21080](https://cve.now/CVE-2018-21080.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2018-21041](https://cve.now/CVE-2018-21041.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2020-11000](https://cve.now/CVE-2020-11000.md): Improper URL validation in GreenBrowser (CVSS 5.7, luchua-bc GreenBrowser) - [CVE-2018-21040](https://cve.now/CVE-2018-21040.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos 9810 chipsets) software. (no CVSS) - [CVE-2018-21039](https://cve.now/CVE-2018-21039.md): An issue was discovered on Samsung mobile devices with N(7.0) software. (no CVSS) - [CVE-2018-21038](https://cve.now/CVE-2018-21038.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2020-11603](https://cve.now/CVE-2020-11603.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. (no CVSS) - [CVE-2020-11607](https://cve.now/CVE-2020-11607.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-11606](https://cve.now/CVE-2020-11606.md): An issue was discovered on Samsung mobile devices with Q(10.0) software. (no CVSS) - [CVE-2020-11605](https://cve.now/CVE-2020-11605.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-11604](https://cve.now/CVE-2020-11604.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (incorporating TEEGRIS) software. (no CVSS) - [CVE-2020-11602](https://cve.now/CVE-2020-11602.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-11601](https://cve.now/CVE-2020-11601.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-11600](https://cve.now/CVE-2020-11600.md): An issue was discovered on Samsung mobile devices with Q(10.0) software. (no CVSS) - [CVE-2018-21081](https://cve.now/CVE-2018-21081.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2018-21082](https://cve.now/CVE-2018-21082.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2018-21083](https://cve.now/CVE-2018-21083.md): An issue was discovered on Samsung mobile devices with M(6.0), N(7.x), and O(8.0) (Exynos or Qualcomm chipsets) software. (no CVSS) - [CVE-2018-21084](https://cve.now/CVE-2018-21084.md): An issue was discovered on Samsung mobile devices with L(5.1), M(6.0), and N(7.x) software. (no CVSS) - [CVE-2018-21085](https://cve.now/CVE-2018-21085.md): An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. (no CVSS) - [CVE-2018-21086](https://cve.now/CVE-2018-21086.md): An issue was discovered on Samsung mobile devices with L(5.x), M(6.0), and N(7.x) software. (no CVSS) - [CVE-2018-21087](https://cve.now/CVE-2018-21087.md): An issue was discovered on Samsung mobile devices with L(5.x), M(6.x), and N(7.x) software. (no CVSS) - [CVE-2018-21088](https://cve.now/CVE-2018-21088.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2020-4291](https://cve.now/CVE-2020-4291.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized u (CVSS 4.7, IBM Security Information Queue) - [CVE-2020-4290](https://cve.now/CVE-2020-4290.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configura (CVSS 4.2, IBM Security Information Queue) - [CVE-2020-4289](https://cve.now/CVE-2020-4289.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive informa (CVSS 5.3, IBM Security Information Queue) - [CVE-2020-4284](https://cve.now/CVE-2020-4284.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized u (CVSS 5.3, IBM Security Information Queue) - [CVE-2020-4282](https://cve.now/CVE-2020-4282.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized (CVSS 3.0, IBM Security Information Queue) - [CVE-2020-4252](https://cve.now/CVE-2020-4252.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2. (CVSS 5.4, IBM Rational DOORS Next Generation) - [CVE-2020-4164](https://cve.now/CVE-2020-4164.md): IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino error (CVSS 2.7, IBM Security Information Queue) - [CVE-2019-4746](https://cve.now/CVE-2019-4746.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2. (CVSS 5.4, IBM Rational DOORS Next Generation) - [CVE-2019-4740](https://cve.now/CVE-2019-4740.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2. (CVSS 5.4, IBM Rational DOORS Next Generation) - [CVE-2019-4737](https://cve.now/CVE-2019-4737.md): IBM DOORS Next Generation (DNG/RRC) 6.0.2. (CVSS 5.4, IBM Rational DOORS Next Generation) - [CVE-2019-4603](https://cve.now/CVE-2019-4603.md): IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them ap (CVSS 4.3, IBM Rational Quality Manager) - [CVE-2019-4602](https://cve.now/CVE-2019-4602.md): IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Rational Quality Manager) - [CVE-2019-4601](https://cve.now/CVE-2019-4601.md): IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that (CVSS 4.3, IBM Rational Quality Manager) - [CVE-2019-20636](https://cve.now/CVE-2019-20636.md): In the Linux kernel before 5.4.12, drivers/input/input.c has out-of-bounds writes via a crafted keycode table, as demonstrated by input\_set\_ (no CVSS) - [CVE-2018-21089](https://cve.now/CVE-2018-21089.md): An issue was discovered on Samsung mobile devices with N(7.x) (MT6755/MT6757 Mediatek models) software. (no CVSS) - [CVE-2018-21090](https://cve.now/CVE-2018-21090.md): An issue was discovered on Samsung mobile devices with software through 2017-11-03 (S.LSI modem chipsets). (no CVSS) - [CVE-2018-21091](https://cve.now/CVE-2018-21091.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. (no CVSS) - [CVE-2018-21092](https://cve.now/CVE-2018-21092.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. (no CVSS) - [CVE-2017-18643](https://cve.now/CVE-2017-18643.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. (no CVSS) - [CVE-2017-18644](https://cve.now/CVE-2017-18644.md): An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. (no CVSS) - [CVE-2017-18645](https://cve.now/CVE-2017-18645.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. (no CVSS) - [CVE-2017-18646](https://cve.now/CVE-2017-18646.md): An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) software. (no CVSS) - [CVE-2020-5735](https://cve.now/CVE-2020-5735.md): Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. (CVSS 8.8, KEV, Amcrest) - [CVE-2020-5736](https://cve.now/CVE-2020-5736.md): Amcrest cameras and NVR are vulnerable to a null pointer dereference over port 37777. (no CVSS, Amcrest) - [CVE-2020-5549](https://cve.now/CVE-2020-5549.md): Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. (no CVSS, Plat'Home Co. EasyBlocks IPv6) - [CVE-2020-5550](https://cve.now/CVE-2020-5550.md): Session fixation vulnerability in EasyBlocks IPv6 Ver. (no CVSS, Plat'Home Co. EasyBlocks IPv6) - [CVE-2019-15789](https://cve.now/CVE-2019-15789.md): Microk8s Privilege Escalation Vulnerability (CVSS 8.8, Canonical MicroK8s) - [CVE-2020-10633](https://cve.now/CVE-2020-10633.md): A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0). (no CVSS, eWON Flexy and Cosy) - [CVE-2020-11653](https://cve.now/CVE-2020-11653.md): An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-04-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.