CVEs published in April 2020
2 tracked CVEs from 2 vendors had their first vendor advisory published in April 2020. Newest first.
2 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2020-1002Unrated
Microsoft Forefront Endpoint Protection: elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Defender Elevation of Privilege Vulnerability'
MS Server · 1 advisory - Added
CVE-2020-11457Medium
pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI
pfSense · 1 advisory