CVEs published April 10, 2020
17 CVEs were published on April 10, 2020: 1 critical, 3 high. 1 is now in CISA KEV.
- Published
- 17
- Critical
- 1
- High
- 3
- Medium
- 0
- Low
- 2
- Unrated
- 11
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Dell PowerConnect
- 1
- dropwizard · io.dropwizard:dropwizard-validation
- 1
- IBM WebSphere Application Server
- 1
- Mate 30 Pro;Mate
- 1
- OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
- 1
- Periscope Holdings BuySpeed
- 1
- Pivotal VMware Tanzu Application Service for VMs
- 1
- Tendermint · github.com/tendermint/tendermint
- 1
- VMware vCenter Server
- 1
Critical 1
High 3
- CVE-2020-5330Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EDell PowerConnect
- CVE-2020-11002Remote Code Execution (RCE) vulnerability in dropwizard-validationdropwizard · io.dropwizard:dropwizard-validation
- CVE-2020-4362IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-bIBM WebSphere Application Server
Medium, low and unrated 13
- CVE-2020-11694In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included.
- CVE-2020-11647In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash.
- CVE-2015-9546An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16.
- CVE-2020-5406PCF Autoscaling logs its database credentialsPivotal VMware Tanzu Application Service for VMs
- CVE-2015-9547An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software.
- CVE-2015-8546An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Galaxy S6 Edge+, and Ga
- CVE-2020-9056Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scriptingPeriscope Holdings BuySpeed
- CVE-2020-5303Denial of service in TendermintTendermint · github.com/tendermint/tendermint
- CVE-2015-5524An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13.
- CVE-2020-6765D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as
- CVE-2020-11669An issue was discovered in the Linux kernel before 5.2 on the powerpc platform.
- CVE-2020-1801There is an improper authentication vulnerability in several smartphones.Mate 30 Pro;Mate
- CVE-2020-1802There is an insufficient integrity validation vulnerability in several products.OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X