Skip to content
OpenAdvisories

Archive

21 April 2020

Vulnerabilities first published on this day (UTC), newest first.

← March 2020 2020 / April /21 May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • High 8.8
    CVE-2018-21140

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.7…

  • High 8.8
    CVE-2017-18791

    Certain NETGEAR devices are affected by CSRF. This affects R6050/JR6150 before 1.0.1.7, PR2000 before 1.0.0.17, R6220 b…

  • High 8.4
    CVE-2017-18792

    NETGEAR D6100 devices before 1.0.0.50_0.0.50 are affected by command injection.

  • High 8.4
    CVE-2017-18794

    Certain NETGEAR devices are affected by command injection. This affects R6300v2 before 1.0.4.8_10.0.77, R6400 before 1.…

  • High 8.4
    CVE-2017-18798

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6700v2 before 1.1.0…

  • High 7.5
    CVE-2017-18799

    Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3…

  • High 7.8
    CVE-2020-8895

    DLL Hijacking in Google Earth Pro Windows installer

    Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system.

    Google Earth Pro
  • High 8.1
    CVE-2020-1757

    Improper Input Validation in Undertow

    A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path afte…

    Red Hat undertow undertow undertow Debian Ubuntu Maven
  • High 7.5
    CVE-2020-1699

    A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Cep…

    The Ceph Project ceph ceph ceph Debian Alpine
  • High 7.5
    CVE-2020-1967 Public exploit EPSS 53%

    Segmentation fault in SSL_check_chain

    Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an i…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  • High 7.1
    CVE-2020-8099

    Link Resolution Privilege Escalation Vulnerability in Bitdefender Antivirus Free (VA-8387)

    A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free versions prior to 1.0.…

    Bitdefender Antivirus Free