CVEs published April 23, 2020
93 CVEs were published on April 23, 2020: 4 critical, 33 high.
- Published
- 93
- Critical
- 4
- High
- 33
- Medium
- 26
- Low
- 1
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 11
Most affected products
- NGINX Controller
- 4
- Ubuntu Shiftfs in the Linux kernel
- 3
- IBM MaaS360
- 2
- IBM UrbanCode Deploy
- 2
- [UNKNOWN] ceph
- 1
- github.com/binance-chain/tss-lib
- 1
- HPE Onboard Administrator
- 1
- IBM Spectrum Protect
- 1
- IBM Tivoli Monitoring
- 1
- minio
- 1
Critical 4
- CVE-2020-11012Authentication bypass MinIO Admin APIminio
- CVE-2020-4415IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking.IBM Spectrum Protect
- CVE-2020-12073The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests.
- CVE-2020-12076The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.
High 33
- CVE-2019-15794Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufsUbuntu Linux kernel
- CVE-2019-15792Type confusion in shiftfsUbuntu Shiftfs in the Linux kernel
- CVE-2019-15791Reference count underflow in shiftfsUbuntu Shiftfs in the Linux kernel
- CVE-2018-21160NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
- CVE-2018-21162Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2018-21161Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2018-21139Certain NETGEAR devices are affected by disclosure of sensitive information.
- CVE-2018-21138Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2018-21137Certain NETGEAR devices are affected by a hardcoded password.
- CVE-2018-21133Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2018-21132Certain NETGEAR devices are affected by authentication bypass.
- CVE-2018-21131Certain NETGEAR devices are affected by unauthenticated firmware downgrade.
- CVE-2018-21102NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.
- CVE-2018-21101NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2017-18732Certain NETGEAR devices are affected by authentication bypass.
- CVE-2017-18733Certain NETGEAR devices are affected by authentication bypass.
- CVE-2017-18734Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2017-18735Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2017-18736Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2017-18737Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2017-18738Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2017-18739Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
- CVE-2017-18741Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2017-18742Certain NETGEAR devices are affected by CSRF.
- CVE-2017-18743Certain NETGEAR devices are affected by authentication bypass.
- CVE-2017-18744Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker.
- CVE-2017-18747Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2017-18748Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2017-18749Certain NETGEAR devices are affected by CSRF.
- CVE-2017-18750Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2017-18751Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2020-4311IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system.IBM Tivoli Monitoring
- CVE-2020-12074The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts
Medium, low and unrated 56
- CVE-2019-15793Mishandling of file-system uid/gid with namespaces in shiftfsUbuntu Shiftfs in the Linux kernel
- CVE-2020-12132Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request.
- CVE-2020-12129The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function.
- CVE-2020-12130The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.
- CVE-2020-12131The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo).
- CVE-2020-12128DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path.
- CVE-2018-21166Certain NETGEAR devices are affected by denial of service.
- CVE-2020-12118The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to comgithub.com/binance-chain/tss-lib
- CVE-2018-21165Certain NETGEAR devices are affected by denial of service.
- CVE-2018-21164Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2018-21163Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2018-21142Certain NETGEAR devices are affected by denial of service.
- CVE-2018-21136Certain NETGEAR devices are affected by disclosure of sensitive information.
- CVE-2018-21135Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2018-21134Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2020-5867In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packageNGINX Controller
- CVE-2018-21110NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2018-21109NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2018-21108NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2018-21107NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2018-21106NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2018-21105NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2020-5866In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses NGINX Controller
- CVE-2019-17101Command execution due to unsanitized input in Netatmo Smart Indoor Security CameraNetatmo Smart Indoor Camera
- CVE-2018-21104NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2020-5864In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by defNGINX Controller
- CVE-2018-21103NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.
- CVE-2020-5865In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, mNGINX Controller
- CVE-2019-20788libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large hei
- CVE-2020-8798httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated set
- CVE-2020-8797Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line In
- CVE-2020-12112BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.
- CVE-2020-12113BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.
- CVE-2020-7132A potential security vulnerability has been identified in HPE Onboard Administrator.HPE Onboard Administrator
- CVE-2020-12105OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-i
- CVE-2017-18740Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2017-18745Certain NETGEAR devices are affected by stored XSS.
- CVE-2017-18746Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2020-11940In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can
- CVE-2020-11939In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overfl
- CVE-2020-11945An issue was discovered in Squid before 5.0.2.
- CVE-2020-7643paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution.paypal-adaptive
- CVE-2020-4353IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricteIBM MaaS360
- CVE-2020-4202IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to IBM UrbanCode Deploy
- CVE-2019-4735IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outsidIBM MaaS360
- CVE-2019-4668IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user.IBM UrbanCode Deploy
- CVE-2020-11806In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the validity of the certi
- CVE-2020-12054The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query).
- CVE-2019-9183An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.
- CVE-2019-8359An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0.
- CVE-2020-5571SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 buildSHARP AQUOS series
- CVE-2020-12079Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution.
- CVE-2020-12077The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capabi
- CVE-2020-12075The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.
- CVE-2020-12071Anchor 0.12.7 allows admins to cause XSS via crafted post content.
- CVE-2020-1760A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3.[UNKNOWN] ceph