CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- broadcom reactor nettyAuthentication Leak On Redirect With Reactor Netty HttpClient6.5 Medium
- hotels styxHTTP Response Splitting in Styx6.5 Medium
- facebook hhvmInsufficient boundary checks when decoding JSON in TryParse reads out of bounds memory,...7.5 High
- facebook hhvmInsufficient boundary checks when decoding JSON in JSON_parser allows read access to out of...8.1 High
- facebook hhvmInsufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory,...7.5 High
- eset cyber securityA permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to...5.2 Medium
- eset cyber securityESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop...6.5 Medium
compat-openssl098SUSESecurity update for compat-openssl098No score- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by...2.4 Low
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- extensible firmware interface development kit (edk ii) firmware interface development kit (edk ii), tianocore edk2 +1 moreImproper authentication in EDK II may allow a privileged user to potentially enable information...4.9 Medium
- naver cloud explorerNaver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the...9.1 Critical
rrdtoolDebianrrdtool - regression updateNo score- webkitgtk, wpewebkit wpe webkit, canonical ubuntu linux +3 more +5 moreaccessibility/AXObjectCache.cpp in WebKit, as used in WebKitGTK through 2.26.4 and WPE WebKit...9.8 Critical
- mikrotik routerosAn issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and...7.5 High
- advsys build engineMultiple buffer overflow vulnerabilities have been found in Ken Silverman Build Engine 1. An...7.8 High
- fleetco fleet maintenance managementFleetco Fleet Maintenance Management (FMM) 1.2 and earlier allows uploading an arbitrary ".php"...8.8 High
- fasterxml jackson-databind, netapp oncommand api services, steelstore cloud integrated storage +1 more +3 morePolymorphic deserialization of malicious object in jackson-databind7.5 High
- evernote yinxiang bijiThe Markdown editor in YXBJ before 8.3.2 on macOS has stored XSS. This behavior may be encountered by some Evernote users; however, it is a vulnerability in YXBJ, not a vulnerability in Evernote.5.4 Medium
- monstra cmsMonstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager...5.4 Medium
- influxdata influxdbInfluxDB Reflected Cross-site Scripting4.8 Medium
- pbootcmsAn issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order...9.8 Critical
- pbootcmsAn issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order...9.8 Critical
- bittorrent utorrentThe bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded...7.5 High
- alfrescoAlfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via...5.4 Medium
- alfrescoAlfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via...5.4 Medium
- alfrescoAlfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via...5.4 Medium
- easyio 30p firmwareEasyIO EasyIO-30P devices before 2.0.5.27 allow XSS via the dev.htm GDN parameter.6.1 Medium
- easyio 30p firmwareEasyIO EasyIO-30P devices before 2.0.5.27 have Incorrect Access Control, related to webuser.js.7.5 High
- mitel micollab audio\, web \& video conferencingA SQL injection vulnerability in in the web conferencing component of Mitel MiCollab AWV before 8...9.8 Critical
- mitel micollab audio\, web \& video conferencingA SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1...9.8 Critical
- mitel micollab audio\, web \& video conferencingA cross-site scripting (XSS) vulnerability in the web conferencing component of Mitel MiCollab...6.1 Medium
- mitel micollabA cross-site scripting (XSS) vulnerability in the web conferencing component of the Mitel...6.1 Medium
- mitel 6863i firmware, 6865i firmware, 6867i firmware +5 more +7 moreA key length vulnerability in the implementation of the SRTP 128-bit key on Mitel 6800 and 6900...5.9 Medium
- seopanel seo panelThe Website Manager module in SEO Panel 3.13.0 and earlier is affected by a stored Cross-Site...4.8 Medium
- fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 morePolymorphic deserialization of malicious object in jackson-databind7.5 High
- keycloak, redhat keycloak operator +1 morePredictable password in Keycloak9.1 Critical
- ultraeditAn issue was discovered in IDM UltraEdit through 24.10.0.32. To exploit the vulnerability, on...7.8 High
- atutorMultiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers...8.8 High
- opensuse factory, suse linux enterprise server, linux enterprise server 12 +2 more +4 moreLocal privilege escalation from user salt to root8.4 High
- pumaHTTP Response Splitting (Early Hints) in Puma6.5 Medium
- safescan ta-8010 firmware, ta-8015 firmware, ta-8020 firmware +4 more +6 moreIncorrect Access Control in Safescan Timemoto TM-616 and TA-8000 series allows remote attackers...7.5 High
- netgear wnr1000 firmwareAn issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple pages (setup.cgi and...6.1 Medium
- netgear wnr1000 firmwareAn issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the web...9.8 Critical
- netgear wnr1000 firmwareAn issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. The web management interface ...9.8 Critical
- netgear wnr1000 firmwareAn issue was discovered on NETGEAR WNR1000V4 1.1.0.54 devices. Multiple actions within the...8.8 High
- artica pandora fmsIn Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file...7.2 High
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain...3.7 Low
- ibm security information queueIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 contains hard-coded...6.8 Medium
- Show moreLoading…