CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- dell idrac7 firmware, idrac8 firmware, idrac9 firmware +1 more +3 more Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a... 7.0 High
- buildah project buildah, redhat enterprise linux, openshift container platform +2 more Path Traversal in Buildah 8.8 High
- elastic elasticsearch Improper Privilege Management in Elasticsearch 8.8 High
- leantime Time-based blind injection in Leantime 8.7 High
- centos, containers bubblewrap, debian linux +1 more +3 more Privilege escalation in setuid mode via user namespaces in Bubblewrap 7.2 High
- zyxel xgs2210-52hp firmware In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site scripting (XSS) issues... 5.4 Medium
- phpmyadmin phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login... 6.1 Medium
- [unknown] pki-core, dogtagpki, redhat certificate system +2 more A vulnerability was found in all pki-core 10.x.x version, where the Token Processing Service (TPS... 2.4 Low
- [unknown] moodle Moodle Oauth 2 Insufficiently Protects Against Compromise 4.8 Medium
- ibm spectrum protect plus, spectrum scale +1 more IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote... 8.8 High
- ibm spectrum protect plus, spectrum scale +1 more IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote... 7.5 High
- ibm spectrum protect plus IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse... 4.8 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 more IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain... 5.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 more IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery... 4.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 more IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery... 4.3 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 more IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a... 6.5 Medium
- ibm tivoli netcool impact, tivoli netcool\/impact +1 more IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This... 5.4 Medium
- ibm spectrum protect plus IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to arbitrary delete... 7.5 High
- ibm spectrum protect plus IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a... 7.5 High
- ibm spectrum protect plus IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute... 7.5 High
- gnu glibc, canonical ubuntu linux, redhat enterprise linux +3 more +5 more An out-of-bounds write vulnerability was found in glibc before 2.31 when handling signal... 5.1 Medium
- lifterlms LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to... 9.8 Critical
- mongodb js-bson JS-bson may incorrectly serialise some requests 4.2 Medium
- telerik ui for silverlight An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The... 7.5 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 more jackson-databind mishandles the interaction between serialization gadgets and typing 8.8 High
- pam-krb5 project pam-krb5, debian linux +1 more pam-krb5 before 4.9 has a buffer overflow that might cause remote code execution in situations... 9.8 Critical
- tecrail responsive filemanager An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the... 6.1 Medium
- x-plane X-Plane 11.41 and earlier allows Arbitrary Memory Write via crafted network packets, which could... 9.8 Critical
- x-plane X-Plane 11.41 and earlier has multiple improper path validations that could allow reading and... 9.8 Critical
- usc cereal An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++... 5.3 Medium
- usc cereal An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr... 9.8 Critical
- intland codebeamer In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting (XSS) vulnerability in the... 4.8 Medium
- intland codebeamer In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter. 4.8 Medium
- paessler prtg network monitor A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows... 9.8 Critical
- objectcomputing micronaut Micronaut's HTTP client is vulnerable to HTTP Request Header Injection 9.8 Critical
- proofpoint email protection An issue was discovered in Proofpoint Email Protection through 2019-09-08. By collecting scores... 3.7 Low
- versiant lynx customer service portal Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript 3.9 Low
- vertiv avocent umg-4000, avocent umg-4000 firmware +1 more The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting 6.3 Medium
- vertiv avocent umg-4000, avocent umg-4000 firmware +1 more Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting 6.3 Medium
- vertiv avocent umg-4000, avocent umg-4000 firmware +1 more The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution 8.3 High
- vercel next.js Directory Traversal in Next.js versions below 9.3.2 4.4 Medium
- elide Read permissions not enforced for client provided filter expressions in Elide http client 6.8 Medium
- sensiolabs symfony Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http 7.6 High
- mozilla bleach regular expression denial-of-service (ReDoS) in Bleach 7.5 High
- odata4j project odata4j SQL Injection in odata4j 9.8 Critical
- odata4j project odata4j SQL Injection in odata4j 9.8 Critical
- sensiolabs symfony Exceptions displayed in non-debug configurations in Symfony 4.6 Medium
- sensiolabs symfony Prevent cache poisoning via a Response Content-Type header 2.6 Low
- Show olderLoading…