Skip to content
OpenAdvisories

Archive

April 2020

Vulnerabilities first published in this month (UTC), newest first.

← March 2020 2020 / April May 2020 →
  1. 1108
  2. 256
  3. 326
  4. 48
  5. 51
  6. 643
  7. 7126
  8. 8139
  9. 930
  10. 1017
  11. 11 
  12. 1217
  13. 1342
  14. 1474
  15. 15513
  16. 16167
  17. 1774
  18. 181
  19. 194
  20. 2064
  21. 2165
  22. 22127
  23. 2393
  24. 2470
  25. 25 
  26. 263
  27. 2786
  28. 2899
  29. 2983
  30. 3055
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.5
    CVE-2020-10663 Public exploit

    Unsafe object creation in json RubyGem

    The JSON gem through 2.2.0 for Ruby, as used in Ruby 2.4 through 2.4.9, 2.5 through 2.5.7, and 2.6 through 2.6.5, has an Unsafe Object Creation Vulnerability. This is quite similar to CVE-2013-0269, but does not rely on poor garbage-collection behavior within…

    ruby2.3 ruby ruby2.5 json Debian Ubuntu Alpine RubyGems
  • High 7.1
    CVE-2019-15794 Public exploit

    Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs

    Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…

    Ubuntu Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.1
    CVE-2019-15792 Public exploit

    Type confusion in shiftfs

    In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->pri…

    Ubuntu Shiftfs in the Linux kernel linux-raspi2 linux-riscv Linux Ubuntu
  • High 7.1
    CVE-2019-15791 Public exploit

    Reference count underflow in shiftfs

    In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the …

    Ubuntu Shiftfs in the Linux kernel linux-raspi2 linux-riscv Linux Ubuntu
  • High 7.5
    CVE-2020-1967 Public exploit EPSS 53%

    Segmentation fault in SSL_check_chain

    Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signature_algorithms_cert" TLS extension. The crash occurs if an i…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine crates.io
  • High 8.8
    CVE-2020-1020 Exploited Public exploit EPSS 65%

    A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperl…

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-2944 Public exploit

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versio…

    Oracle Solaris Operating System
  • High 7.5
    CVE-2020-11738 Exploited Public exploit Scanner template EPSS 98%

    The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Trave…

    KEV Nov 3, 2021
  • High 8.1
    CVE-2020-5330 Public exploit EPSS 13%

    Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22…

    Dell Dell PowerConnect
  • High 8.8
    CVE-2020-5735 Exploited Public exploit EPSS 36%

    Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attack…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-8835 Public exploit

    Linux kernel bpf verifier vulnerability

    In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable …

    Linux kernel Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 8.8
    CVE-2020-10199 Exploited Public exploit Scanner template EPSS 99%

    Nexus Repository Manager 3 - Remote Code Execution

    Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

    org.sonatype.nexus:nexus-extdirect Maven
    KEV Nov 3, 2021
  • High 8.8
    CVE-2020-10204 Public exploit Scanner template EPSS 38%

    Remote Code Execution - JavaEL Injection (low privileged accounts) in Nexus Repository Manager

    Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

    org.sonatype.nexus:nexus-core Maven