CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- metagauss registrationmagicIn the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote...8.8 High
- metagauss registrationmagicThe RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users ...8.8 High
- metagauss registrationmagicIn the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote...8.8 High
- metagauss registrationmagicThe RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users ...4.3 Medium
- metagauss registrationmagicA CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote...8.8 High
- gitlabGitLab 10.7 and later through 12.7.2 has Incorrect Access Control.9.8 Critical
- mi miui firmwareAn issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps...7.3 High
- mi miui firmwareAn issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps...6.5 Medium
pcreMageiaUpdated pcre packages fix security vulnerabilityNo score- zoho manageengine, zohocorp manageengine desktop central +1 moreZoho ManageEngine Desktop Central 10 allows remote code execution because of deserialization of...9.8 Critical
- patriotmemory viper rgb firmwarePatriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The...7.8 High
- netkit telnet project telnet, arista eos, debian linux +3 more +5 moreutility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary...9.8 Critical
vp-toolkitnpmHolder can (re)create authentic credentials after receiving a credential in vp-toolkitNo scorevp-toolkitnpmHolder can generate proof of ownership for credentials it does not control in vp-toolkitNo score- usrsctp project usrsctp, canonical ubuntu linux, debian linux +2 moreusrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.6.5 Medium
- yubico yubikey one time password validation serverThe verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL...7.5 High
- yubico yubikey one time password validation serverThe sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an...8.6 High
- omron plc cj series, plc cj1 firmware, plc cj2 firmware +2 moreIn all versions of Omron PLC CJ Series, an attacker can send a series of specific data packets...7.5 High
- emerson valvelinkIn Emerson ValveLink v12.0.264 to v13.4.118, a vulnerability in the ValveLink software may allow...7.8 High
- nvidia gpu display driver, geforce experience, quadro firmware +1 more +3 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control...7.8 High
- centreonAn issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive...7.5 High
- centreonAn issue was discovered in Centreon before 2.8.30, 18.10.8, 19.04.5, and 19.10.2. SQL Injection...9.8 Critical
- echatserver easy chat serverAn issue was discovered in EFS Easy Chat Server 3.1. There is a buffer overflow via a long body2...7.5 High
- spring cloud config, vmware spring cloud config +1 moreDirectory Traversal with spring-cloud-config-server6.5 Medium
- hcltech connections, hcl software "hcl connections" +1 moreThe HCL Connections 5.5 help system is vulnerable to cross-site scripting, caused by improper...5.4 Medium
- eset cyber security, mobile security, nod32 antivirus +2 more +4 moreThe ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an...9.8 Critical
- hcltech connections, hcl software "hcl connections" +1 moreHCL Connections 6.5 is vulnerable to possible information leakage. Connections could disclose...5.5 Medium
- qemu, canonical ubuntu linux, debian linux +1 more +3 moreQEMU 4.1.0 has a memory leak in zrle_compress_data in ui/vnc-enc-zrle.c during a VNC disconnect...3.5 Low
- prestashopPossible information disclosure in PrestaShop7.6 High
- centreonAn issue was discovered in Centreon before 18.10.8, 19.10.1, and 19.04.2. It allows CSRF with...8.8 High
- centreonAn issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides...7.5 High
- mi mdz-25-dt firmwareAn issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get...6.8 Medium
- timeshift project timeshift, canonical ubuntu linux, fedoraproject fedora +2 moreinit_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting...7.0 High
- redsoftware pdfescapeAn untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and...7.8 High
- ibm platform lsf, spectrum lsf, spectrum computing suite for high performance analytics +2 more +4 moreIBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2...7.4 High
- d-link dsl-2640b firmwareAn issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface...7.5 High
- dlink dwl-2600ap firmwareD-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability...7.8 High
- d-link dwl-2600ap access point, dlink dwl-2600ap firmware +1 moreD-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability...7.8 High
- comtrend vr-3033 firmwareComtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command...8.8 High
- dlink dwl-2600ap firmwareD-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability...7.8 High
- testlinkMultiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated...8.8 High
- whmcssmarters web tv playerIPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by...9.8 Critical
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the...5.4 Medium
- phpgurukul daily expense tracker systemPHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by...9.8 Critical
- humaxdigital hga12r-02 firmwareHUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm msm8905 firmware, msm8909 firmware +18 more +20 moreThe secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +39 more +41 morePossible buffer overflow in WLAN handler due to lack of validation of destination buffer size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +30 more +32 morePossible buffer overflow in WLAN handler due to lack of validation of destination buffer size...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8009 firmware, apq8017 firmware +42 more +44 morePossible buffer overflow in data offload handler due to lack of check of keydata length when...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8096 firmware, apq8096au firmware +38 more +40 morePossible buffer overflow in WLAN Parser due to lack of length check when copying data in...9.8 Critical
- Show moreLoading…