# CVEs published 2020-04-29

83 CVEs were published on April 29, 2020: 3 critical, 10 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-5623](https://cve.now/CVE-2019-5623.md): Accellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection') (no CVSS, Accellion File Transfer Appliance)
- [CVE-2019-5622](https://cve.now/CVE-2019-5622.md): Accellion File Transfer Appliance Use of Hard-coded Credentials (no CVSS, Accellion File Transfer Appliance)
- [CVE-2019-5621](https://cve.now/CVE-2019-5621.md): ABBS Software Audio Media Player Stack-based Buffer Overflow (no CVSS, ABBS Software Audio Media Player)
- [CVE-2019-5620](https://cve.now/CVE-2019-5620.md): ABB MicroSCADA Pro SYS600 Missing Authentication for Critical Function (no CVSS, ABB MicroSCADA Pro SYS600)
- [CVE-2019-5619](https://cve.now/CVE-2019-5619.md): AASync.com AASync Stack-based Buffer Overflow (no CVSS, AASync.com AASync)
- [CVE-2019-5618](https://cve.now/CVE-2019-5618.md): A-PDF WAV to MP3 Stack-based Buffer Overflow (no CVSS, A-PDF WAV to MP3)
- [CVE-2020-12477](https://cve.now/CVE-2020-12477.md): The REST API functions in TeamPass 2.1.27.36 allow any user with a valid API token to bypass IP address whitelist restrictions via an X-Forw (no CVSS, nilsteampassnet/teampass)
- [CVE-2020-12478](https://cve.now/CVE-2020-12478.md): TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. (no CVSS, nilsteampassnet/teampass)
- [CVE-2020-12479](https://cve.now/CVE-2020-12479.md): TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with source (no CVSS, nilsteampassnet/teampass)
- [CVE-2016-11061](https://cve.now/CVE-2016-11061.md): Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15 (no CVSS)
- [CVE-2020-11943](https://cve.now/CVE-2020-11943.md): An issue was discovered in Open-AudIT 3.2.2. (no CVSS)
- [CVE-2020-11942](https://cve.now/CVE-2020-11942.md): An issue was discovered in Open-AudIT 3.2.2. (no CVSS)
- [CVE-2020-11024](https://cve.now/CVE-2020-11024.md): Man-in-the-middle attack in Moonlight iOS/tvOS (CVSS 6.1, moonlight-stream Moonlight)
- [CVE-2019-16011](https://cve.now/CVE-2019-16011.md): Cisco IOS XE SD-WAN Software Command Injection Vulnerability (CVSS 7.8, Cisco IOS XE SD-WAN Software)
- [CVE-2020-12467](https://cve.now/CVE-2020-12467.md): Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie. (no CVSS, intelliants/subrion)
- [CVE-2020-12468](https://cve.now/CVE-2020-12468.md): Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. (no CVSS, intelliants/subrion)
- [CVE-2020-12469](https://cve.now/CVE-2020-12469.md): admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages (no CVSS, intelliants/subrion)
- [CVE-2020-12470](https://cve.now/CVE-2020-12470.md): MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template. (no CVSS)
- [CVE-2020-12471](https://cve.now/CVE-2020-12471.md): MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of (no CVSS)
- [CVE-2020-12472](https://cve.now/CVE-2020-12472.md): MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description. (no CVSS)
- [CVE-2020-12473](https://cve.now/CVE-2020-12473.md): MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a (no CVSS)
- [CVE-2020-12465](https://cve.now/CVE-2020-12465.md): An array overflow was discovered in mt76\_add\_fragment in drivers/net/wireless/mediatek/mt76/dma.c in the Linux kernel before 5.5.10, aka CID (no CVSS)
- [CVE-2020-11021](https://cve.now/CVE-2020-11021.md): HTTP request which redirect to another hostname do not strip authorization header in Actions Http-Client (CVSS 6.3, actions http-client · @actions/http-client)
- [CVE-2020-12464](https://cve.now/CVE-2020-12464.md): usb\_sg\_cancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a refere (no CVSS)
- [CVE-2020-11020](https://cve.now/CVE-2020-11020.md): Authentication and extension bypass in Faye (CVSS 8.5, Faye)
- [CVE-2020-11009](https://cve.now/CVE-2020-11009.md): IDOR can reveal execution data and logs to unauthorized user in Rundeck (CVSS 6.5, rundeck · org.rundeck:rundeck)
- [CVE-2020-12275](https://cve.now/CVE-2020-12275.md): GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API. (no CVSS)
- [CVE-2020-12276](https://cve.now/CVE-2020-12276.md): GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature. (no CVSS)
- [CVE-2020-12277](https://cve.now/CVE-2020-12277.md): GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated. (no CVSS)
- [CVE-2020-12462](https://cve.now/CVE-2020-12462.md): The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS. (no CVSS)
- [CVE-2020-12461](https://cve.now/CVE-2020-12461.md): PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. (no CVSS)
- [CVE-2020-12458](https://cve.now/CVE-2020-12458.md): An information-disclosure flaw was found in Grafana through 6.7.3. (no CVSS, github.com/grafana/grafana)
- [CVE-2020-12459](https://cve.now/CVE-2020-12459.md): In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (whic (no CVSS, github.com/grafana/grafana)
- [CVE-2020-8775](https://cve.now/CVE-2020-8775.md): Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags. (no CVSS)
- [CVE-2019-19165](https://cve.now/CVE-2019-19165.md): AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting (CVSS 7.2, Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8…)
- [CVE-2020-7804](https://cve.now/CVE-2020-7804.md): ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the Shel (CVSS 6.4, HandySoft Groupware(HShell.dll) for for Windows 7, 8,)
- [CVE-2020-2575](https://cve.now/CVE-2020-2575.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-8773](https://cve.now/CVE-2020-8773.md): The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability. (no CVSS)
- [CVE-2020-8774](https://cve.now/CVE-2020-8774.md): Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function. (no CVSS)
- [CVE-2020-11677](https://cve.now/CVE-2020-11677.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). (no CVSS)
- [CVE-2020-12446](https://cve.now/CVE-2020-12446.md): The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writ (no CVSS)
- [CVE-2020-11676](https://cve.now/CVE-2020-11676.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). (no CVSS)
- [CVE-2020-11675](https://cve.now/CVE-2020-11675.md): Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). (no CVSS)
- [CVE-2020-11674](https://cve.now/CVE-2020-11674.md): Cerner medico 26.00 allows variable reuse, possibly causing data corruption. (no CVSS)
- [CVE-2019-4288](https://cve.now/CVE-2019-4288.md): IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with ph (CVSS 4.3, IBM Maximo Anywhere)
- [CVE-2019-4286](https://cve.now/CVE-2019-4286.md): IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with ph (CVSS 4.3, IBM Maximo Anywhere)
- [CVE-2017-18856](https://cve.now/CVE-2017-18856.md): NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection. (no CVSS)
- [CVE-2017-18860](https://cve.now/CVE-2017-18860.md): Certain NETGEAR devices are affected by debugging command execution. (no CVSS)
- [CVE-2018-21232](https://cve.now/CVE-2018-21232.md): re2c before 2.0 has uncontrolled recursion that causes stack consumption in find\_fixed\_tags. (no CVSS)
- [CVE-2020-10797](https://cve.now/CVE-2020-10797.md): An XSS vulnerability resides in the hostname field of the diag\_ping.php page in pfsense before 2.4.5 version. (no CVSS)
- [CVE-2020-11446](https://cve.now/CVE-2020-11446.md): ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET di (no CVSS)
- [CVE-2017-18855](https://cve.now/CVE-2017-18855.md): NETGEAR WNR854T devices before 1.5.2 are affected by command execution. (no CVSS)
- [CVE-2017-18854](https://cve.now/CVE-2017-18854.md): NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection. (CVSS 6.7)
- [CVE-2017-18853](https://cve.now/CVE-2017-18853.md): Certain NETGEAR devices are affected by password recovery and file access. (CVSS 9.6)
- [CVE-2019-20781](https://cve.now/CVE-2019-20781.md): An issue was discovered in LG Bridge before April 2019 on Windows. (no CVSS)
- [CVE-2020-12252](https://cve.now/CVE-2020-12252.md): An issue was discovered in Gigamon GigaVUE 5.5.01.11. (no CVSS)
- [CVE-2020-12251](https://cve.now/CVE-2020-12251.md): An issue was discovered in Gigamon GigaVUE 5.5.01.11. (no CVSS)
- [CVE-2019-16653](https://cve.now/CVE-2019-16653.md): An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges. (no CVSS)
- [CVE-2019-7634](https://cve.now/CVE-2019-7634.md): SUAP V2 allows XSS during the update of user information. (no CVSS)
- [CVE-2019-16652](https://cve.now/CVE-2019-16652.md): The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands. (no CVSS)
- [CVE-2020-12246](https://cve.now/CVE-2020-12246.md): Beeline Smart Box 2.0.38 routers allow "Advanced settings \> Other \> Diagnostics" OS command injection via the Ping ping\_ipaddr parameter, th (no CVSS)
- [CVE-2020-11884](https://cve.now/CVE-2020-11884.md): In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code i (no CVSS)
- [CVE-2019-20792](https://cve.now/CVE-2019-20792.md): OpenSC before 0.20.0 has a double free in coolkey\_free\_private\_data because coolkey\_add\_object in libopensc/card-coolkey.c lacks a uniquenes (no CVSS)
- [CVE-2020-12447](https://cve.now/CVE-2020-12447.md): A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to r (no CVSS)
- [CVE-2020-3955](https://cve.now/CVE-2020-3955.md): ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML w (no CVSS, VMware ESXi)
- [CVE-2019-19100](https://cve.now/CVE-2019-19100.md): Privilege escalation via B&R Automation Studio upgrade service (CVSS 7.5, B&R Automation Studio)
- [CVE-2019-19102](https://cve.now/CVE-2019-19102.md): Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service (CVSS 5.5, B&R Automation Studio)
- [CVE-2019-19101](https://cve.now/CVE-2019-19101.md): Incomplete communication encryption and validation in B&R Automation Studio upgrade service (CVSS 6.5, B&R Automation Studio)
- [CVE-2020-8489](https://cve.now/CVE-2020-8489.md): ABB System 800xA Inter process communication vulnerability - 800xA Information Management (CVSS 7.8, ABB 800xA Information Management)
- [CVE-2020-8488](https://cve.now/CVE-2020-8488.md): ABB System 800xA Inter process communication vulnerability - 800xA Batch Management (CVSS 7.8, ABB 800xA Batch Management)
- [CVE-2020-8487](https://cve.now/CVE-2020-8487.md): ABB System 800xA Inter process communication vulnerability - System 800xA Base (CVSS 6.6, ABB System 800xA Base)
- [CVE-2020-8486](https://cve.now/CVE-2020-8486.md): ABB System 800xA Inter process communication vulnerability - 800xA RNRP (CVSS 6.6, ABB 800xA RNRP)
- [CVE-2020-8485](https://cve.now/CVE-2020-8485.md): ABB System 800xA Inter process communication vulnerability - 800xA for Mod 300 (CVSS 7.8, ABB 800xA for MOD300)
- [CVE-2020-8484](https://cve.now/CVE-2020-8484.md): ABB System 800xA Inter process communication vulnerability - 800xA for DCI (CVSS 7.8, ABB 800xA for DCI)
- [CVE-2020-8478](https://cve.now/CVE-2020-8478.md): ABB System 800xA Inter process communication vulnerability (CVSS 5.3, ABB OPC Server for AC · ABB MMS Server for AC +1)
- [CVE-2020-12443](https://cve.now/CVE-2020-12443.md): BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename (no CVSS)
- [CVE-2020-8481](https://cve.now/CVE-2020-8481.md): ABB Central Licensing System - Information disclosure (CVSS 9.8, ABB Central Licensing System · ABB Ability System 800xA +15)
- [CVE-2020-8471](https://cve.now/CVE-2020-8471.md): ABB Central Licensing System - Weak File Permissions (CVSS 7.8, ABB Central Licensing System · ABB Ability System 800xA +15)
- [CVE-2020-11022](https://cve.now/CVE-2020-11022.md): jQuery has a potential XSS vulnerability (CVSS 6.9, jQuery · jquery-rails +4)
- [CVE-2020-11023](https://cve.now/CVE-2020-11023.md): Potential XSS vulnerability in jQuery (CVSS 6.9, KEV, jQuery · jquery-rails +2)
- [CVE-2020-8475](https://cve.now/CVE-2020-8475.md): ABB Central Licensing System - Denial of Service Vulnerability (CVSS 5.3, ABB Central Licensing System · ABB Ability System 800xA +16)
- [CVE-2020-8476](https://cve.now/CVE-2020-8476.md): ABB Central Licensing System - Elevation of Privilege Vulnerability (CVSS 5.3, ABB Central Licensing System · ABB Ability System 800xA +16)
- [CVE-2020-8479](https://cve.now/CVE-2020-8479.md): ABB Central Licensing System - XML External Entity Injection (CVSS 9.4, ABB Central Licensing System · ABB Ability System 800xA +16)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.