2020-04-26

2020-04-27

2020-04-28

All (4) Critical (13) High (15) Medium (13) Low (4)

CVE-2020-11810 LOW POC PATCH Monitor

An issue was discovered in OpenVPN 2.4.x before 2.4.9. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Race Condition Code Injection Openvpn Debian Linux Fedora

NVD GitHub

CVSS 3.1

3.7

EPSS

1.6%

CVE-2020-9488 LOW PATCH Monitor

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Apache Log4J Communications Application Session Controller Communications Billing And Revenue Management +43

NVD VulDB

CVSS 3.1

3.7

EPSS

0.0%

CVE-2020-1807 LOW Monitor

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Huawei Authentication Bypass Mate 20 Firmware

NVD

CVSS 3.1

3.5

EPSS

0.2%

CVE-2020-11869 LOW PATCH Monitor

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Denial Of Service Integer Overflow Qemu

NVD

CVSS 3.1

3.3

EPSS

0.4%