Skip to content
OpenAdvisories

Archive

April 2020

Vulnerabilities first published in this month (UTC), newest first.

592 results · Clear filters · Feed

  • Medium 5.4

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

  • Medium 6.1

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

  • Medium 5.4

    IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifyi…

  • Medium 5.9

    ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronizati…

  • Medium 4.3

    Byobu apport hook uploads user's ~/.screenrc

    Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 4.4

    Stored XSS on back office edit page

    In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

  • Medium 4.1

    Stored XSS with custom URLs in PrestaShop module ps_linklist

    In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fixed in version 3.1.0

  • Medium 4.1

    Reflected XSS with social networks fields

    PrestaShop module ps_facetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.52 are affected by a stack-based buffer overflow by an authenticated user.

  • Medium 6.8

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D8500 before 1.0.3.43,…

  • Medium 6.8

    NETGEAR R7800 devices before 1.0.2.62 are affected by command injection by an authenticated user.

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6220 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects DGN2200 before 1.0.0.5…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800 be…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6150v2 before 1.0.1.76, R7500…

  • Medium 4.8

    Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.47, EX6100v2 before 1.0.1.76, EX615…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 befo…

  • Medium 4.3

    Certain NETGEAR devices are affected by reflected XSS. This affects D3600 before 1.0.0.75, D6000 before 1.0.0.75, D7800…

  • Medium 6.4

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects WAC505 before 5.0.10.2…

  • Medium 6.1

    NETGEAR WAC510 devices before 5.0.10.2 are affected by disclosure of sensitive information.

  • Medium 5.2

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • Medium 5.2

    NETGEAR WAC510 devices before 8.0.1.3 are affected by stored XSS.

  • Medium 6.3

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200v4 …

  • Medium 4.3

    NETGEAR R8500 devices before v1.0.2.128 are affected by a buffer overflow by an unauthenticated attacker.

  • Medium 5.2

    Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.58, D7800 before 1.0.1.34, JNR1010v…

  • Medium 5.6

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6000 befo…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…

  • Medium 5.6

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D622…

  • Medium 5.6

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6220 before 1.0.0.40,…

  • Medium 5.6

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.40,…

  • Medium 6.3

    Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6400 before 1.0.0.74,…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D6100 before 1.0.0.63,…

  • Medium 6.8

    Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D3600 before 1.0.0.75,…

  • Medium 6.8

    Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D3600 befo…