# CVEs published 2020-04-22

127 CVEs were published on April 22, 2020: 6 critical, 59 high. Days are UTC.

- [CVE-2020-7350](https://cve.now/CVE-2020-7350.md): Metasploit Framework Plugin Libnotify Command Injection (CVSS 6.1, Rapid7 Metasploit Framework)
- [CVE-2020-8833](https://cve.now/CVE-2020-8833.md): Apport race condition in crash report permissions (CVSS 5.6, Canonical Apport)
- [CVE-2020-8831](https://cve.now/CVE-2020-8831.md): World writable root owned lock file created in user controllable location (CVSS 6.5, Canonical Apport)
- [CVE-2020-10915](https://cve.now/CVE-2020-10915.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. (CVSS 9.8, VEEAM One Agent)
- [CVE-2020-8867](https://cve.now/CVE-2020-8867.md): This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of OPC Foundation UA .NET Stand (CVSS 5.3, OPC Foundation UA .NET Standard · OPCFoundation.NetStandard…)
- [CVE-2020-10913](https://cve.now/CVE-2020-10913.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10914](https://cve.now/CVE-2020-10914.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. (CVSS 9.8, VEEAM One Agent)
- [CVE-2020-10911](https://cve.now/CVE-2020-10911.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10912](https://cve.now/CVE-2020-10912.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10908](https://cve.now/CVE-2020-10908.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10909](https://cve.now/CVE-2020-10909.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10910](https://cve.now/CVE-2020-10910.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10906](https://cve.now/CVE-2020-10906.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. (CVSS 7.8, Foxit Reader)
- [CVE-2020-10907](https://cve.now/CVE-2020-10907.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. (CVSS 7.8, Foxit Reader)
- [CVE-2020-10904](https://cve.now/CVE-2020-10904.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10905](https://cve.now/CVE-2020-10905.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-10902](https://cve.now/CVE-2020-10902.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10903](https://cve.now/CVE-2020-10903.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-10900](https://cve.now/CVE-2020-10900.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. (CVSS 7.8, Foxit Reader)
- [CVE-2020-10901](https://cve.now/CVE-2020-10901.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-10898](https://cve.now/CVE-2020-10898.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10899](https://cve.now/CVE-2020-10899.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. (CVSS 7.8, Foxit Reader)
- [CVE-2020-10896](https://cve.now/CVE-2020-10896.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10897](https://cve.now/CVE-2020-10897.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10893](https://cve.now/CVE-2020-10893.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10894](https://cve.now/CVE-2020-10894.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-10895](https://cve.now/CVE-2020-10895.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10891](https://cve.now/CVE-2020-10891.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10892](https://cve.now/CVE-2020-10892.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10889](https://cve.now/CVE-2020-10889.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-10890](https://cve.now/CVE-2020-10890.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2018-21151](https://cve.now/CVE-2018-21151.md): Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2018-21150](https://cve.now/CVE-2018-21150.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2020-11649](https://cve.now/CVE-2020-11649.md): An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. (no CVSS)
- [CVE-2020-11506](https://cve.now/CVE-2020-11506.md): An issue was discovered in GitLab 10.7.0 and later through 12.9.2. (no CVSS)
- [CVE-2020-11505](https://cve.now/CVE-2020-11505.md): An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before (no CVSS)
- [CVE-2020-1983](https://cve.now/CVE-2020-1983.md): libslirp: use after free vulnerability cause a denial of service. (CVSS 7.5, libslirp)
- [CVE-2020-7488](https://cve.now/CVE-2020-7488.md): A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between t (CVSS 7.5, EcoStruxure Machine Expert (all versions)SoMachine, SoMachi…)
- [CVE-2020-7487](https://cve.now/CVE-2020-7487.md): A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on t (no CVSS, EcoStruxure Machine Expert (all versions)SoMachine, SoMachi…)
- [CVE-2020-7490](https://cve.now/CVE-2020-7490.md): A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and pr (no CVSS, Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo D…)
- [CVE-2020-7489](https://cve.now/CVE-2020-7489.md): A CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability exists on EcoStru (CVSS 9.8, SoMachine Basic (all versions)EcoStruxure Machine Expert –…)
- [CVE-2019-6859](https://cve.now/CVE-2019-6859.md): A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Mo (no CVSS, Modicon Controllers)
- [CVE-2018-18405](https://cve.now/CVE-2018-18405.md): jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. (no CVSS)
- [CVE-2018-21130](https://cve.now/CVE-2018-21130.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2018-21129](https://cve.now/CVE-2018-21129.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 8.8)
- [CVE-2018-21128](https://cve.now/CVE-2018-21128.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2018-21127](https://cve.now/CVE-2018-21127.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2020-7055](https://cve.now/CVE-2020-7055.md): An issue was discovered in Elementor 2.7.4. (no CVSS)
- [CVE-2020-12066](https://cve.now/CVE-2020-12066.md): CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. (no CVSS)
- [CVE-2019-20787](https://cve.now/CVE-2019-20787.md): Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. (no CVSS)
- [CVE-2017-18752](https://cve.now/CVE-2017-18752.md): Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. (CVSS 8.8)
- [CVE-2020-11011](https://cve.now/CVE-2020-11011.md): RCE via file upload in Phproject (CVSS 9.9, Alanaktion Phproject)
- [CVE-2017-18754](https://cve.now/CVE-2017-18754.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2017-18755](https://cve.now/CVE-2017-18755.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2017-18756](https://cve.now/CVE-2017-18756.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2017-18757](https://cve.now/CVE-2017-18757.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 4.7)
- [CVE-2017-18758](https://cve.now/CVE-2017-18758.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 8.8)
- [CVE-2018-21126](https://cve.now/CVE-2018-21126.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2018-21125](https://cve.now/CVE-2018-21125.md): NETGEAR WAC510 devices before 5.0.0.17 are affected by authentication bypass. (CVSS 8.8)
- [CVE-2018-21124](https://cve.now/CVE-2018-21124.md): NETGEAR WAC510 devices before 5.0.0.17 are affected by privilege escalation. (CVSS 8.8)
- [CVE-2018-21123](https://cve.now/CVE-2018-21123.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18759](https://cve.now/CVE-2017-18759.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2017-18761](https://cve.now/CVE-2017-18761.md): NETGEAR R8000 devices before 1.0.4.2 are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2017-18762](https://cve.now/CVE-2017-18762.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18763](https://cve.now/CVE-2017-18763.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2017-18764](https://cve.now/CVE-2017-18764.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18765](https://cve.now/CVE-2017-18765.md): Certain NETGEAR devices are affected by denial of service. (CVSS 6.5)
- [CVE-2017-18766](https://cve.now/CVE-2017-18766.md): Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. (CVSS 8.8)
- [CVE-2017-18767](https://cve.now/CVE-2017-18767.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2017-18768](https://cve.now/CVE-2017-18768.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2020-10712](https://cve.now/CVE-2020-10712.md): A flaw was found in OpenShift Container Platform version 4.1 and later. (CVSS 7.0, Red Hat openshift/cluster-image-registry-operator)
- [CVE-2018-21122](https://cve.now/CVE-2018-21122.md): Certain NETGEAR devices are affected by denial of service. (CVSS 6.5)
- [CVE-2018-21121](https://cve.now/CVE-2018-21121.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2020-7642](https://cve.now/CVE-2020-7642.md): lazysizes through 5.2.0 allows execution of malicious JavaScript. (no CVSS, lazysizes)
- [CVE-2018-21120](https://cve.now/CVE-2018-21120.md): Certain NETGEAR devices are affected by CSRF. (CVSS 5.2)
- [CVE-2018-21119](https://cve.now/CVE-2018-21119.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21118](https://cve.now/CVE-2018-21118.md): NETGEAR XR500 devices before 2.3.2.32 are affected by authentication bypass. (CVSS 8.8)
- [CVE-2020-5740](https://cve.now/CVE-2020-5740.md): Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYS (no CVSS, Plex Media Server)
- [CVE-2018-21117](https://cve.now/CVE-2018-21117.md): NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers via the traceroute handler. (CVSS 8.8)
- [CVE-2017-18769](https://cve.now/CVE-2017-18769.md): Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. (CVSS 4.6)
- [CVE-2020-4085](https://cve.now/CVE-2020-4085.md): "HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user." (no CVSS, "HCL Connections")
- [CVE-2017-18770](https://cve.now/CVE-2017-18770.md): Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2018-21116](https://cve.now/CVE-2018-21116.md): NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. (CVSS 8.8)
- [CVE-2017-18772](https://cve.now/CVE-2017-18772.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2020-8477](https://cve.now/CVE-2020-8477.md): ABB System 800xA Information Manager Remote Code Execution (CVSS 8.8, ABB System 800xA Information Manager)
- [CVE-2017-18773](https://cve.now/CVE-2017-18773.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.7)
- [CVE-2018-21115](https://cve.now/CVE-2018-21115.md): NETGEAR XR500 devices before 2.3.2.32 are affected by remote code execution by unauthenticated attackers. (CVSS 8.8)
- [CVE-2017-18775](https://cve.now/CVE-2017-18775.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2018-21114](https://cve.now/CVE-2018-21114.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2017-18776](https://cve.now/CVE-2017-18776.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.4)
- [CVE-2017-18777](https://cve.now/CVE-2017-18777.md): Certain NETGEAR devices are affected by administrative password disclosure. (CVSS 8.4)
- [CVE-2017-18778](https://cve.now/CVE-2017-18778.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.4)
- [CVE-2019-19107](https://cve.now/CVE-2019-19107.md): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Information Exposure (CVSS 6.2, ABB TG/S 3.2 Telephone Gateway · Busch-Jaeger 6186/11 Telef…)
- [CVE-2018-21113](https://cve.now/CVE-2018-21113.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18779](https://cve.now/CVE-2017-18779.md): Certain NETGEAR devices are affected by a buffer overflow. (CVSS 8.4)
- [CVE-2019-19106](https://cve.now/CVE-2019-19106.md): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Access Control issues (CVSS 9.1, ABB TG/S 3.2 Telephone Gateway · Busch-Jaeger 6186/11 Telef…)
- [CVE-2017-18780](https://cve.now/CVE-2017-18780.md): Certain NETGEAR devices are affected by denial of service. (CVSS 6.2)
- [CVE-2017-18781](https://cve.now/CVE-2017-18781.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2019-19105](https://cve.now/CVE-2019-19105.md): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Plaintext storing of credentials (CVSS 6.2, ABB TG/S 3.2 Telephone Gateway · Busch-Jaeger 6186/11 Telef…)
- [CVE-2017-18782](https://cve.now/CVE-2017-18782.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2019-19104](https://cve.now/CVE-2019-19104.md): ABB/Busch-Jaeger Telephone Gateway TG/S 3.2 Improper Authentication and Access Control (CVSS 9.1, ABB TG/S 3.2 Telephone Gateway · Busch-Jaeger 6186/11 Telef…)
- [CVE-2017-18783](https://cve.now/CVE-2017-18783.md): Certain NETGEAR devices are affected by XSS. (CVSS 5.0)
- [CVE-2017-18784](https://cve.now/CVE-2017-18784.md): Certain NETGEAR devices are affected by XSS. (CVSS 5.0)
- [CVE-2018-21112](https://cve.now/CVE-2018-21112.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21111](https://cve.now/CVE-2018-21111.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2017-18785](https://cve.now/CVE-2017-18785.md): Certain NETGEAR devices are affected by XSS. (CVSS 4.2)
- [CVE-2017-18786](https://cve.now/CVE-2017-18786.md): Certain NETGEAR devices are affected by command injection. (CVSS 8.4)
- [CVE-2020-8474](https://cve.now/CVE-2020-8474.md): ABB System 800xA Weak Registry Permissions (CVSS 7.8, ABB System 800xA Base)
- [CVE-2017-18787](https://cve.now/CVE-2017-18787.md): Certain NETGEAR devices are affected by command injection. (CVSS 8.4)
- [CVE-2020-11938](https://cve.now/CVE-2020-11938.md): In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. (no CVSS)
- [CVE-2020-11796](https://cve.now/CVE-2020-11796.md): In JetBrains Space through 2020-04-22, the password authentication implementation was insecure. (no CVSS)
- [CVE-2020-11795](https://cve.now/CVE-2020-11795.md): In JetBrains Space through 2020-04-22, the session timeout period was configured improperly. (no CVSS)
- [CVE-2020-11693](https://cve.now/CVE-2020-11693.md): JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue. (no CVSS)
- [CVE-2020-11692](https://cve.now/CVE-2020-11692.md): In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators. (no CVSS)
- [CVE-2020-11691](https://cve.now/CVE-2020-11691.md): In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible. (no CVSS)
- [CVE-2020-11690](https://cve.now/CVE-2020-11690.md): In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. (no CVSS)
- [CVE-2020-11689](https://cve.now/CVE-2020-11689.md): In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file. (no CVSS)
- [CVE-2020-11688](https://cve.now/CVE-2020-11688.md): In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. (no CVSS)
- [CVE-2020-11687](https://cve.now/CVE-2020-11687.md): In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. (no CVSS)
- [CVE-2020-11686](https://cve.now/CVE-2020-11686.md): In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. (no CVSS)
- [CVE-2020-11685](https://cve.now/CVE-2020-11685.md): In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. (no CVSS)
- [CVE-2020-11416](https://cve.now/CVE-2020-11416.md): JetBrains Space through 2020-04-22 allows stored XSS in Chats. (no CVSS)
- [CVE-2017-18788](https://cve.now/CVE-2017-18788.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.7)
- [CVE-2017-18789](https://cve.now/CVE-2017-18789.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 6.2)
- [CVE-2020-11539](https://cve.now/CVE-2020-11539.md): An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. (no CVSS)
- [CVE-2019-20102](https://cve.now/CVE-2019-20102.md): The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before versio (no CVSS, Atlassian Confluence Server)
- [CVE-2020-12059](https://cve.now/CVE-2020-12059.md): An issue was discovered in Ceph through 13.2.9. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.