Skip to content
OpenAdvisories

Archive

10 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /10 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

17 results · Feed

  • Unscored —
    CVE-2020-11694

    In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixe…

  • Unscored —
    CVE-2020-11647

    In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed …

    wireshark wireshark wireshark Debian Ubuntu Alpine
  • High 8.1
    CVE-2020-5330 Public exploit EPSS 13%

    Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22…

    Dell Dell PowerConnect
  • Unscored —
    CVE-2015-9546

    An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HT…

  • Unscored —
    CVE-2020-5406

    PCF Autoscaling logs its database credentials

    VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database userna…

    Pivotal VMware Tanzu Application Service for VMs
  • Unscored —
    CVE-2015-9547

    An issue was discovered on Samsung mobile devices with JBP(4.3) and KK(4.4.2) software. Because the READ_LOGS permissio…

  • Unscored —
    CVE-2015-8546

    An issue was discovered on Samsung mobile devices with software through 2015-11-12, affecting the Galaxy S6/S6 Edge, Ga…

  • Low 3.9
    CVE-2020-9056

    Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting

    Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitiza…

    Periscope Holdings BuySpeed
  • High 8.0
    CVE-2020-11002

    Remote Code Execution (RCE) vulnerability in dropwizard-validation

    dropwizard-validation before versions 2.0.3 and 1.3.21 has a remote code execution vulnerability. A server-side template injection was identified in the self-validating feature enabling attackers to inject arbitrary Java EL expressions, leading to Remote Code…

    dropwizard dropwizard io.dropwizard:dropwizard-validation Maven
  • Low 3.1
    CVE-2020-5303

    Denial of service in Tendermint

    Tendermint before versions 0.33.3, 0.32.10, and 0.31.12 has a denial-of-service vulnerability. Tendermint does not limit the number of P2P connection requests. For each p2p connection, it allocates XXX bytes. Even though this memory is garbage collected once …

    tendermint tendermint github.com/tendermint/tendermint Go
  • Unscored —
    CVE-2015-5524

    An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-05-13. There is a buffer…

  • Unscored —
    CVE-2020-6765

    D-Link DSL-GS225 J1 AU_1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supp…

  • Unscored —
    CVE-2020-11669

    An issue was discovered in the Linux kernel before 5.2 on the powerpc platform. arch/powerpc/kernel/idle_book3s.S does …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2020-1801

    There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does…

  • High 7.5
    CVE-2020-4362

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…

    IBM WebSphere Application Server
  • Unscored —
    CVE-2020-1802

    There is an insufficient integrity validation vulnerability in several products. The device does not sufficiently valid…

  • Critical 9.8
    CVE-2020-3952 Exploited Public exploit Scanner template EPSS 90%

    Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Serv…

    Virtualization
    KEV Nov 3, 2021