CVEs published April 29, 2020
83 CVEs were published on April 29, 2020: 3 critical, 10 high. 1 is now in CISA KEV.
- Published
- 83
- Critical
- 3
- High
- 10
- Medium
- 16
- Low
- 0
- Unrated
- 54
- Now in CISA KEV
- 1
- Fix available
- 11
Most affected products
- ABB Central Licensing System · ABB Ability System 800xA +16
- 3
- B&R Automation Studio
- 3
- intelliants/subrion
- 3
- nilsteampassnet/teampass
- 3
- ABB Central Licensing System · ABB Ability System 800xA +15
- 2
- Accellion File Transfer Appliance
- 2
- github.com/grafana/grafana
- 2
- IBM Maximo Anywhere
- 2
- A-PDF WAV to MP3
- 1
- AASync.com AASync
- 1
Critical 3
- CVE-2017-18853Certain NETGEAR devices are affected by password recovery and file access.
- CVE-2020-8481ABB Central Licensing System - Information disclosureABB Central Licensing System · ABB Ability System 800xA +15
- CVE-2020-8479ABB Central Licensing System - XML External Entity InjectionABB Central Licensing System · ABB Ability System 800xA +16
High 10
- CVE-2019-16011Cisco IOS XE SD-WAN Software Command Injection VulnerabilityCisco IOS XE SD-WAN Software
- CVE-2020-11020Authentication and extension bypass in FayeFaye
- CVE-2019-19165AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by settingEbiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8…
- CVE-2020-2575Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-19100Privilege escalation via B&R Automation Studio upgrade serviceB&R Automation Studio
- CVE-2020-8489ABB System 800xA Inter process communication vulnerability - 800xA Information ManagementABB 800xA Information Management
- CVE-2020-8488ABB System 800xA Inter process communication vulnerability - 800xA Batch ManagementABB 800xA Batch Management
- CVE-2020-8485ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300ABB 800xA for MOD300
- CVE-2020-8484ABB System 800xA Inter process communication vulnerability - 800xA for DCIABB 800xA for DCI
- CVE-2020-8471ABB Central Licensing System - Weak File PermissionsABB Central Licensing System · ABB Ability System 800xA +15
Medium, low and unrated 70
- CVE-2019-5623Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')Accellion File Transfer Appliance
- CVE-2019-5622Accellion File Transfer Appliance Use of Hard-coded CredentialsAccellion File Transfer Appliance
- CVE-2019-5621ABBS Software Audio Media Player Stack-based Buffer OverflowABBS Software Audio Media Player
- CVE-2019-5620ABB MicroSCADA Pro SYS600 Missing Authentication for Critical FunctionABB MicroSCADA Pro SYS600
- CVE-2019-5619AASync.com AASync Stack-based Buffer OverflowAASync.com AASync
- CVE-2019-5618A-PDF WAV to MP3 Stack-based Buffer OverflowA-PDF WAV to MP3
- CVE-2020-12477The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forwnilsteampassnet/teampass
- CVE-2020-12478TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root.nilsteampassnet/teampass
- CVE-2020-12479TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sourcenilsteampassnet/teampass
- CVE-2016-11061Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15
- CVE-2020-11943An issue was discovered in Open-AudIT 3.2.2.
- CVE-2020-11942An issue was discovered in Open-AudIT 3.2.2.
- CVE-2020-11024Man-in-the-middle attack in Moonlight iOS/tvOSmoonlight-stream Moonlight
- CVE-2020-12467Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.intelliants/subrion
- CVE-2020-12468Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language.intelliants/subrion
- CVE-2020-12469admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpagesintelliants/subrion
- CVE-2020-12470MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.
- CVE-2020-12471MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of
- CVE-2020-12472MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.
- CVE-2020-12473MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a
- CVE-2020-12465An array overflow was discovered in mt76_add_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID
- CVE-2020-11021HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Clientactions http-client · @actions/http-client
- CVE-2020-12464usb_sg_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a refere
- CVE-2020-11009IDOR can reveal execution data and logs to unauthorized user in Rundeckrundeck · org.rundeck:rundeck
- CVE-2020-12275GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.
- CVE-2020-12276GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.
- CVE-2020-12277GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated.
- CVE-2020-12462The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.
- CVE-2020-12461PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism.
- CVE-2020-12458An information-disclosure flaw was found in Grafana through 6.7.3.github.com/grafana/grafana
- CVE-2020-12459In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (whicgithub.com/grafana/grafana
- CVE-2020-8775Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.
- CVE-2020-7804ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShelHandySoft Groupware(HShell.dll) for for Windows 7, 8,
- CVE-2020-8773The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.
- CVE-2020-8774Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.
- CVE-2020-11677Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).
- CVE-2020-12446The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writ
- CVE-2020-11676Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).
- CVE-2020-11675Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).
- CVE-2020-11674Cerner medico 26.00 allows variable reuse, possibly causing data corruption.
- CVE-2019-4288IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with phIBM Maximo Anywhere
- CVE-2019-4286IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with phIBM Maximo Anywhere
- CVE-2017-18856NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.
- CVE-2017-18860Certain NETGEAR devices are affected by debugging command execution.
- CVE-2018-21232re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.
- CVE-2020-10797An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version.
- CVE-2020-11446ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET di
- CVE-2017-18855NETGEAR WNR854T devices before 1.5.2 are affected by command execution.
- CVE-2017-18854NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.
- CVE-2019-20781An issue was discovered in LG Bridge before April 2019 on Windows.
- CVE-2020-12252An issue was discovered in Gigamon GigaVUE 5.5.01.11.
- CVE-2020-12251An issue was discovered in Gigamon GigaVUE 5.5.01.11.
- CVE-2019-16653An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges.
- CVE-2019-7634SUAP V2 allows XSS during the update of user information.
- CVE-2019-16652The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands.
- CVE-2020-12246Beeline Smart Box 2.0.38 routers allow "Advanced settings > Other > Diagnostics" OS command injection via the Ping ping_ipaddr parameter, th
- CVE-2020-11884In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code i
- CVE-2019-20792OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniquenes
- CVE-2020-12447A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to r
- CVE-2020-3955ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML wVMware ESXi
- CVE-2019-19102Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade serviceB&R Automation Studio
- CVE-2019-19101Incomplete communication encryption and validation in B&R Automation Studio upgrade serviceB&R Automation Studio
- CVE-2020-8487ABB System 800xA Inter process communication vulnerability - System 800xA BaseABB System 800xA Base
- CVE-2020-8486ABB System 800xA Inter process communication vulnerability - 800xA RNRPABB 800xA RNRP
- CVE-2020-8478ABB System 800xA Inter process communication vulnerabilityABB OPC Server for AC · ABB MMS Server for AC +1
- CVE-2020-12443BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename
- CVE-2020-11022jQuery has a potential XSS vulnerabilityjQuery · jquery-rails +4
- CVE-2020-11023Potential XSS vulnerability in jQueryjQuery · jquery-rails +2
- CVE-2020-8475ABB Central Licensing System - Denial of Service VulnerabilityABB Central Licensing System · ABB Ability System 800xA +16
- CVE-2020-8476ABB Central Licensing System - Elevation of Privilege VulnerabilityABB Central Licensing System · ABB Ability System 800xA +16