CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- jaba xpressAn issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary...8.8 High
- granditGRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions,...6.5 Medium
- pdfresurrect project pdfresurrect, debian linux +1 moreIn PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF...7.8 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typing9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typing9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typing9.8 Critical
- palemoon pale moonPale Moon 28.8.x before 28.8.4 has a segmentation fault related to module scripting, as...7.5 High
- sophos hitmanpro.alertSophos HitmanPro.Alert before build 861 allows local elevation of privilege.7.8 High
- dlink dir-615jx10 firmwarefmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup...8.8 High
- dlink dir-615jx10 firmwarefmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the...8.8 High