CVEs published April 13, 2020
42 CVEs were published on April 13, 2020: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 42
- Critical
- 0
- High
- 1
- Medium
- 2
- Low
- 2
- Unrated
- 37
- Now in CISA KEV
- 1
- Fix available
- 27
Most affected products
- Google Chrome
- 26
- Cisco Webex Business Suite
- 1
- Cisco Webex Meetings Multimedia Viewer
- 1
- Fuji Electric V-Server Lite all versions prior to
- 1
- Red Hat libssh
- 1
- Rockwell Automation RSLinx Classic versions 4.1.00 and prior
- 1
- The Ceph Project ceph
- 1
- UniFi Cloud Key Gen2
- 1
High 1
Medium, low and unrated 41
- CVE-2020-10642In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lRockwell Automation RSLinx Classic versions 4.1.00 and prior
- CVE-2020-10646Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow.Fuji Electric V-Server Lite all versions prior to
- CVE-2020-11736fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether
- CVE-2020-6455Out of bounds read in WebSQL in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a cGoogle Chrome
- CVE-2020-6456Insufficient validation of untrusted input in clipboard in Google Chrome prior to 81.0.4044.92 allowed a local attacker to bypass site isolaGoogle Chrome
- CVE-2020-6452Heap buffer overflow in media in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via aGoogle Chrome
- CVE-2020-6454Use after free in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extensioGoogle Chrome
- CVE-2020-6450Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-6451Use after free in WebAudio in Google Chrome prior to 80.0.3987.162 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-6447Inappropriate implementation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user Google Chrome
- CVE-2020-6448Use after free in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HGoogle Chrome
- CVE-2020-6445Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content securityGoogle Chrome
- CVE-2020-6446Insufficient policy enforcement in trusted types in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass content securityGoogle Chrome
- CVE-2020-6443Insufficient data validation in developer tools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had convinced the user Google Chrome
- CVE-2020-6444Uninitialized use in WebRTC in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crGoogle Chrome
- CVE-2020-6441Insufficient policy enforcement in omnibox in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a crafGoogle Chrome
- CVE-2020-6442Inappropriate implementation in cache in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to leak cross-origin data via a craftGoogle Chrome
- CVE-2020-6439Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass security UI via a Google Chrome
- CVE-2020-6440Inappropriate implementation in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a maliGoogle Chrome
- CVE-2020-6437Inappropriate implementation in WebView in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a crafted Google Chrome
- CVE-2020-6438Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a mGoogle Chrome
- CVE-2020-6435Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker who had compromised the rendeGoogle Chrome
- CVE-2020-6436Use after free in window management in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption Google Chrome
- CVE-2020-6433Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restrictGoogle Chrome
- CVE-2020-6434Use after free in devtools in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a craGoogle Chrome
- CVE-2020-6431Insufficient policy enforcement in full screen in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to spoof security UI via a cGoogle Chrome
- CVE-2020-6432Insufficient policy enforcement in navigations in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to bypass navigation restricGoogle Chrome
- CVE-2020-6423Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafteGoogle Chrome
- CVE-2020-6430Type Confusion in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HGoogle Chrome
- CVE-2019-1866Cisco Webex Business Suite Host Header Value Integrity VulnerabilityCisco Webex Business Suite
- CVE-2020-3126Cisco Webex Meetings Multimedia Viewer VulnerabilityCisco Webex Meetings Multimedia Viewer
- CVE-2019-13916An issue was discovered in Cypress (formerly Broadcom) WICED Studio 6.2 CYW20735B1 and CYW20819A1.
- CVE-2020-11734cgi-bin/go in CyberSolutions CyberMail 5 or later allows XSS via the ACTION parameter.
- CVE-2020-8430Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal.
- CVE-2020-11673An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress.
- CVE-2020-9478An issue was discovered in Rubrik 5.0.3-2296.
- CVE-2020-8148UniFi Cloud Key firmware < 1.1.6 contains a vulnerability that enables an attacker being able to change a device hostname by sending a malicUniFi Cloud Key Gen2
- CVE-2020-1759A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discoThe Ceph Project ceph
- CVE-2020-11731The Media Library Assistant plugin before 2.82 for Wordpress suffers from multiple XSS vulnerabilities in all Settings/Media Library Assista
- CVE-2020-11732The Media Library Assistant plugin before 2.82 for Wordpress suffers from a Local File Inclusion vulnerability in mla_gallery link=download.
- CVE-2020-1730A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers.Red Hat libssh