CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- zammadAn issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive...4.3 Medium
- zammadAn issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources...5.3 Medium
- canonical ubuntu linux, netapp aff 8300 firmware, aff 8700 firmware +30 more +32 moreUbuntu 18.04 Linux kernel i915 incomplete fix for CVE-2019-146155.5 Medium
- red hat business-central, redhat decision manager, process automation manager +2 moreA vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where...4.6 Medium
- centreonAn issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides...7.5 High
- centreonAn issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides...7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update5.3 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update5.3 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update7.5 High
- envoyproxy envoy, redhat openshift service mesh, debian linux +2 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update7.5 High
- hewlett packard enterprise hpe oneview global dashboard, hp oneview global dashboard +1 moreHPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability. HPE...7.5 High
- zyxel nas326, nas520, nas540 +38 more +40 moreZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi9.8 Critical
- cisco remote phy, remote phy 120 firmware, remote phy 220 firmware +1 more +3 moreCisco Remote PHY Device Software Command Injection Vulnerability6.7 Medium
- cisco web security appliance (wsa), content security management appliance, email security appliance +2 more +4 moreCisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service Vulnerability5.3 Medium
- cisco identity services engine, identity services engine software +1 moreCisco Identity Services Engine Cross-Site Scripting Vulnerability5.4 Medium
- cisco jabber im for android, intelligence proximity, jabber +6 more +8 moreCisco Intelligent Proximity SSL Certificate Validation Vulnerability7.4 High
- cisco prime network registrarCisco Prime Network Registrar Cross-Site Request Forgery Vulnerability7.1 High
- cisco webex network recording player, webex wrf player, webex meetings +2 more +4 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco webex network recording player, webex wrf player, webex meetings +2 more +4 moreCisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities7.8 High
- cisco prime collaboration provisioningCisco Prime Collaboration Provisioning Information Disclosure Vulnerability5.3 Medium
- cisco prime collaboration provisioningCisco Prime Collaboration Provisioning Cross-Site Scripting Vulnerability6.1 Medium
- cisco ios xr software, ios xr +1 moreCisco IOS XR Software IPsec Packet Processor Denial of Service Vulnerability5.8 Medium
- cisco telepresence management suite (tms), telepresence management suite +1 moreCisco TelePresence Management Suite Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco webex meetingsCisco Webex Meetings Client for MacOS Information Disclosure Vulnerability4.3 Medium
- cisco email security appliance, email security appliance (esa) +1 moreCisco Email Security Appliance Uncontrolled Resource Exhaustion Vulnerability6.5 Medium
- rubetek smarthome firmwareRubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and...9.8 Critical
- humaxdigital hga12r-02 firmwareAn issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the...9.8 Critical
- commscope arris tg1692a firmwareARRIS TG1692A devices allow remote attackers to discover the administrator login name and...7.5 High
- codepeople appointment booking calendarThe Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields...7.8 High
- codepeople appointment booking calendarStored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the...4.8 Medium
- dlink dsl-2680 firmwareA Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface ...7.5 High
- dlink dsl-2680 firmwareA Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface ...7.5 High
- dlink dsl-2680 firmwareA Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface ...7.5 High
- dlink dsl-2680 firmwareA Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface ...7.5 High
- dlink dsl-2680 firmwareA Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows...5.4 Medium
- metalgenix genixcmsGeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control. This...8.8 High
drupal/svg_formatterPackagistSVG Formatter module provides support for using SVG images on your website. This security release fixes third-party dependencies included in or required by SVG Formatter. XSS bypass using entities and…No score- phpipamAn issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to...8.8 High
- unctad asycuda worldAn issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an...9.8 Critical
- craftcms craft cmsSEOmatic for CraftCMS allows Server-Side Template Injection9.8 Critical
- creative-solutions creative contact formAn issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before...5.3 Medium
- parse-community parse-serverInformation disclosure in parse-server7.7 High
- 360 f5c router firmware, p0 router firmware, 360 security technology, inc. router f5c +2 moreBy adding some special fields to the uri ofrouter app function, the user could abuse background...7.5 High
- djangoproject django, canonical ubuntu linux, debian linux +2 more +4 moreSQL injection in Django8.8 High
- linux kernel, redhat enterprise linux, enterprise mrg +2 moreA flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such...7.5 High
- plat'home co.,ltd. openblocks iot vx2, plathome openblocks iot vx2 firmware +1 moreOpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network...8.8 High
- plat'home co.,ltd. openblocks iot vx2, plathome openblocks iot vx2 firmware +1 moreOpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network...8.8 High
- gnu glibc, canonical ubuntu linux, debian linux +11 more +13 moreThe GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range...5.5 Medium
- red hat ansible, redhat ansible engine, ansible tower +2 moreOS Command Injection in ansible7.4 High
- broadcom reactor nettyDoS Via Malformed URL with Reactor Netty HTTP Server6.5 Medium
- Show moreLoading…