# CVEs published 2020-04-23

93 CVEs were published on April 23, 2020: 4 critical, 33 high. Days are UTC.

- [CVE-2019-15794](https://cve.now/CVE-2019-15794.md): Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs (CVSS 7.1, Ubuntu Linux kernel)
- [CVE-2019-15793](https://cve.now/CVE-2019-15793.md): Mishandling of file-system uid/gid with namespaces in shiftfs (CVSS 6.5, Ubuntu Shiftfs in the Linux kernel)
- [CVE-2019-15792](https://cve.now/CVE-2019-15792.md): Type confusion in shiftfs (CVSS 7.1, Ubuntu Shiftfs in the Linux kernel)
- [CVE-2019-15791](https://cve.now/CVE-2019-15791.md): Reference count underflow in shiftfs (CVSS 7.1, Ubuntu Shiftfs in the Linux kernel)
- [CVE-2020-12132](https://cve.now/CVE-2020-12132.md): Fifthplay S.A.M.I before 2019.3\_HP2 allows unauthenticated stored XSS via a POST request. (no CVSS)
- [CVE-2020-12129](https://cve.now/CVE-2020-12129.md): The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function. (no CVSS)
- [CVE-2020-12130](https://cve.now/CVE-2020-12130.md): The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function. (no CVSS)
- [CVE-2020-12131](https://cve.now/CVE-2020-12131.md): The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo). (no CVSS)
- [CVE-2020-12128](https://cve.now/CVE-2020-12128.md): DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path. (no CVSS)
- [CVE-2020-11012](https://cve.now/CVE-2020-11012.md): Authentication bypass MinIO Admin API (CVSS 9.3, minio)
- [CVE-2018-21166](https://cve.now/CVE-2018-21166.md): Certain NETGEAR devices are affected by denial of service. (CVSS 4.5)
- [CVE-2018-21160](https://cve.now/CVE-2018-21160.md): NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF. (CVSS 8.0)
- [CVE-2020-12118](https://cve.now/CVE-2020-12118.md): The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to com (no CVSS, github.com/binance-chain/tss-lib)
- [CVE-2018-21165](https://cve.now/CVE-2018-21165.md): Certain NETGEAR devices are affected by denial of service. (CVSS 4.5)
- [CVE-2018-21164](https://cve.now/CVE-2018-21164.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21163](https://cve.now/CVE-2018-21163.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2018-21162](https://cve.now/CVE-2018-21162.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2018-21161](https://cve.now/CVE-2018-21161.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2018-21142](https://cve.now/CVE-2018-21142.md): Certain NETGEAR devices are affected by denial of service. (CVSS 4.5)
- [CVE-2018-21139](https://cve.now/CVE-2018-21139.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 7.1)
- [CVE-2018-21138](https://cve.now/CVE-2018-21138.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2018-21137](https://cve.now/CVE-2018-21137.md): Certain NETGEAR devices are affected by a hardcoded password. (CVSS 8.8)
- [CVE-2018-21136](https://cve.now/CVE-2018-21136.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 4.6)
- [CVE-2018-21135](https://cve.now/CVE-2018-21135.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2018-21134](https://cve.now/CVE-2018-21134.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 6.8)
- [CVE-2020-5867](https://cve.now/CVE-2020-5867.md): In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install package (no CVSS, NGINX Controller)
- [CVE-2018-21133](https://cve.now/CVE-2018-21133.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2018-21132](https://cve.now/CVE-2018-21132.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2018-21131](https://cve.now/CVE-2018-21131.md): Certain NETGEAR devices are affected by unauthenticated firmware downgrade. (CVSS 8.1)
- [CVE-2018-21110](https://cve.now/CVE-2018-21110.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21109](https://cve.now/CVE-2018-21109.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21108](https://cve.now/CVE-2018-21108.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21107](https://cve.now/CVE-2018-21107.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21106](https://cve.now/CVE-2018-21106.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21105](https://cve.now/CVE-2018-21105.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2020-5866](https://cve.now/CVE-2020-5866.md): In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses (no CVSS, NGINX Controller)
- [CVE-2019-17101](https://cve.now/CVE-2019-17101.md): Command execution due to unsanitized input in Netatmo Smart Indoor Security Camera (CVSS 5.7, Netatmo Smart Indoor Camera)
- [CVE-2018-21104](https://cve.now/CVE-2018-21104.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2020-5864](https://cve.now/CVE-2020-5864.md): In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by def (no CVSS, NGINX Controller)
- [CVE-2018-21103](https://cve.now/CVE-2018-21103.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 6.8)
- [CVE-2018-21102](https://cve.now/CVE-2018-21102.md): NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF. (CVSS 8.8)
- [CVE-2020-5865](https://cve.now/CVE-2020-5865.md): In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, m (no CVSS, NGINX Controller)
- [CVE-2018-21101](https://cve.now/CVE-2018-21101.md): NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user. (CVSS 8.0)
- [CVE-2019-20788](https://cve.now/CVE-2019-20788.md): libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large hei (no CVSS)
- [CVE-2020-8798](https://cve.now/CVE-2020-8798.md): httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated set (no CVSS)
- [CVE-2020-8797](https://cve.now/CVE-2020-8797.md): Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line In (no CVSS)
- [CVE-2020-12112](https://cve.now/CVE-2020-12112.md): BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. (no CVSS)
- [CVE-2020-12113](https://cve.now/CVE-2020-12113.md): BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used. (no CVSS)
- [CVE-2020-7132](https://cve.now/CVE-2020-7132.md): A potential security vulnerability has been identified in HPE Onboard Administrator. (no CVSS, HPE Onboard Administrator)
- [CVE-2017-18732](https://cve.now/CVE-2017-18732.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2017-18733](https://cve.now/CVE-2017-18733.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2017-18734](https://cve.now/CVE-2017-18734.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2020-12105](https://cve.now/CVE-2020-12105.md): OpenConnect through 8.08 mishandles negative return values from X509\_check\_ function calls, which might assist attackers in performing man-i (no CVSS)
- [CVE-2017-18735](https://cve.now/CVE-2017-18735.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18736](https://cve.now/CVE-2017-18736.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18737](https://cve.now/CVE-2017-18737.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18738](https://cve.now/CVE-2017-18738.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18739](https://cve.now/CVE-2017-18739.md): Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18740](https://cve.now/CVE-2017-18740.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 6.3)
- [CVE-2017-18741](https://cve.now/CVE-2017-18741.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 7.4)
- [CVE-2017-18742](https://cve.now/CVE-2017-18742.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2017-18743](https://cve.now/CVE-2017-18743.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 8.8)
- [CVE-2017-18744](https://cve.now/CVE-2017-18744.md): Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18745](https://cve.now/CVE-2017-18745.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 5.2)
- [CVE-2017-18746](https://cve.now/CVE-2017-18746.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 6.1)
- [CVE-2017-18747](https://cve.now/CVE-2017-18747.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2017-18748](https://cve.now/CVE-2017-18748.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 8.8)
- [CVE-2017-18749](https://cve.now/CVE-2017-18749.md): Certain NETGEAR devices are affected by CSRF. (CVSS 8.8)
- [CVE-2017-18750](https://cve.now/CVE-2017-18750.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2017-18751](https://cve.now/CVE-2017-18751.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2020-11940](https://cve.now/CVE-2020-11940.md): In nDPI through 3.2 Stable, an out-of-bounds read in concat\_hash\_string in ssh.c can be exploited by a network-positioned attacker that can (no CVSS)
- [CVE-2020-11939](https://cve.now/CVE-2020-11939.md): In nDPI through 3.2 Stable, the SSH protocol dissector has multiple KEXINIT integer overflows that result in a controlled remote heap overfl (no CVSS)
- [CVE-2020-11945](https://cve.now/CVE-2020-11945.md): An issue was discovered in Squid before 5.0.2. (no CVSS)
- [CVE-2020-7643](https://cve.now/CVE-2020-7643.md): paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. (no CVSS, paypal-adaptive)
- [CVE-2020-4415](https://cve.now/CVE-2020-4415.md): IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. (CVSS 9.8, IBM Spectrum Protect)
- [CVE-2020-4353](https://cve.now/CVE-2020-4353.md): IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricte (CVSS 4.6, IBM MaaS360)
- [CVE-2020-4311](https://cve.now/CVE-2020-4311.md): IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. (CVSS 7.4, IBM Tivoli Monitoring)
- [CVE-2020-4202](https://cve.now/CVE-2020-4202.md): IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to (CVSS 5.0, IBM UrbanCode Deploy)
- [CVE-2019-4735](https://cve.now/CVE-2019-4735.md): IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outsid (CVSS 2.4, IBM MaaS360)
- [CVE-2019-4668](https://cve.now/CVE-2019-4668.md): IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. (CVSS 6.2, IBM UrbanCode Deploy)
- [CVE-2020-11806](https://cve.now/CVE-2020-11806.md): In MailStore Outlook Add-in (and Email Archive Outlook Add-in) through 12.1.2, the login process does not validate the validity of the certi (no CVSS)
- [CVE-2020-12054](https://cve.now/CVE-2020-12054.md): The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). (no CVSS)
- [CVE-2019-9183](https://cve.now/CVE-2019-9183.md): An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. (no CVSS)
- [CVE-2019-8359](https://cve.now/CVE-2019-8359.md): An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. (no CVSS)
- [CVE-2020-5571](https://cve.now/CVE-2020-5571.md): SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build (no CVSS, SHARP AQUOS series)
- [CVE-2020-12079](https://cve.now/CVE-2020-12079.md): Beaker before 0.8.9 allows a sandbox escape, enabling system access and code execution. (no CVSS)
- [CVE-2020-12077](https://cve.now/CVE-2020-12077.md): The mappress-google-maps-for-wordpress plugin before 2.53.9 for WordPress does not correctly implement AJAX functions with nonces (or capabi (no CVSS)
- [CVE-2020-12073](https://cve.now/CVE-2020-12073.md): The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests. (CVSS 9.1)
- [CVE-2020-12074](https://cve.now/CVE-2020-12074.md): The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts (CVSS 8.8)
- [CVE-2020-12075](https://cve.now/CVE-2020-12075.md): The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions. (CVSS 6.3)
- [CVE-2020-12076](https://cve.now/CVE-2020-12076.md): The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. (CVSS 9.6)
- [CVE-2020-12071](https://cve.now/CVE-2020-12071.md): Anchor 0.12.7 allows admins to cause XSS via crafted post content. (no CVSS)
- [CVE-2020-1760](https://cve.now/CVE-2020-1760.md): A flaw was found in the Ceph Object Gateway, where it supports request sent by an anonymous user in Amazon S3. (CVSS 5.8, \[UNKNOWN\] ceph)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.