CVEs published April 12, 2020
17 CVEs were published on April 12, 2020: 0 critical, 1 high.
- Published
- 17
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
High 1
Medium, low and unrated 16
- CVE-2020-11724An issue was discovered in OpenResty before 1.15.8.4.
- CVE-2020-11722Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an u
- CVE-2020-11721load_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a deni
- CVE-2020-11714eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location.
- CVE-2020-11713wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.
- CVE-2020-11712Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field.
- CVE-2020-11710An issue was discovered in docker-kong (for Kong) through 2.0.3.
- CVE-2020-11709cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilit
- CVE-2020-11701An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11702An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11703An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11704An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11705An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11706An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11707An issue was discovered in ProVide (formerly zFTPServer) through 13.1.
- CVE-2020-11708An issue was discovered in ProVide (formerly zFTPServer) through 13.1.