2020-04-26

2020-04-27

2020-04-28

All (4) Critical (13) High (15) Medium (13) Low (4)

CVE-2020-11810 Apr 27, 15:15 LOW POC PATCH Monitor

An issue was discovered in OpenVPN 2.4.x before 2.4.9. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Race Condition Code Injection Debian Openvpn Debian Linux +2

NVD GitHub

CVSS 3.1

3.7

EPSS

1.6%

CVE-2020-9488 Apr 27, 16:15 LOW PATCH Monitor

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Apache Information Disclosure Debian Oracle Debian Linux +46

NVD VulDB

CVSS 3.1

3.7

EPSS

0.0%

CVE-2020-1807 Apr 27, 15:15 LOW Monitor

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. Rated low severity (CVSS 3.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Huawei Mate 20 Firmware

NVD

CVSS 3.1

3.5

EPSS

0.2%

CVE-2020-11869 Apr 27, 19:15 LOW PATCH Monitor

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Denial Of Service Integer Overflow Qemu

NVD

CVSS 3.1

3.3

EPSS

0.4%