CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- jenkins p4, jenkins project p4 plugin +1 moreMissing permission checks in Jenkins P4 Plugin4.3 Medium
- jenkins p4, jenkins project p4 plugin +1 moreCSRF vulnerability in Jenkins P4 Plugin4.3 Medium
- jenkins audit trail, jenkins project audit trail plugin +1 moreXSS vulnerability in Jenkins Audit Trail Plugin6.1 Medium
- jenkins cobertura, jenkins project cobertura plugin +1 moreArbitrary file write vulnerability in Jenkins Cobertura Plugin6.5 Medium
- jenkins cobertura, jenkins project cobertura plugin +1 moreXXE vulnerability in Jenkins Cobertura Plugin7.1 High
- jenkins timestamper, jenkins project timestamper plugin +1 moreStored XSS vulnerability in Jenkins Timestamper Plugin4.8 Medium
- jenkins git, jenkins project git plugin +1 moreImproper Neutralization of Input During Web Page Generation in Jenkins Git Plugin5.4 Medium
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security Plugin8.8 High
- jenkins script security, jenkins project script security plugin +1 moreSandbox bypass vulnerability in Script Security Plugin8.8 High
- ibm spectrum scaleThe IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service...7.5 High
- maharaIn Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata...4.3 Medium
- maharaIn Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal...6.5 Medium
- joobi jnewsJNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.4.8 Medium
- hikashopHikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption].4.8 Medium
- sap netweaver application servernwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks...6.4 Medium
- google chrome, debian linux, fedoraproject fedora +2 moreInsufficient policy enforcement in media in Google Chrome prior to 80.0.3987.132 allowed a remote...8.8 High
- quest kace systems managementservice/krashrpt.php in Quest KACE K1000 Systems Management Appliance before 6.4 SP3 (6.4.120822)...9.8 Critical
- d-link dcs-930l devices, dlink dcs-930l firmware +1 moresetSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code...7.2 High
- red hat openshift/apb-tools-container, redhat openshift container platform +1 moreIt has been found that in openshift-enterprise version 3.11 and openshift-enterprise versions 4.1...7.0 High
- google android, debian linux +1 moreIn vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper...7.5 High
- sleuthkit the sleuth kit, debian linux, fedoraproject fedora +2 moreIn version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow...9.8 Critical
- sleuthkit the sleuth kitIn version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in...9.1 Critical
gccMageiaUpdated gcc packages fix security vulnerabilityNo scorembedtlsMageiaUpdated mbedtls packages fix security vulnerabilitiesNo score- gnu glibc, canonical ubuntu linux, debian linux +8 more +10 moreA use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the...7.0 High
- phpgurukul online book storeAn unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul...9.8 Critical
- phpgurukul job portalAn unauthenticated file upload vulnerability has been identified in admin/gallery.php in...9.8 Critical
- gonitro nitro pronpdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro:...8.1 High
- gonitro nitro pronpdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap...8.1 High
- rconfiglib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute...8.8 High
- rconfigAn issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection...9.8 Critical
- dlink dir-825 firmwareAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer...8.8 High
- dlink dir-825 firmware, trendnet tew-632brp firmware +1 moreAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to...8.8 High
- dlink dir-825 firmware, trendnet tew-632brp firmware +1 moreAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to...8.8 High
- dlink dir-825 firmware, trendnet tew-632brp firmware +1 moreAn issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to...8.8 High
- monstraMonstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts...6.5 Medium
- wftpserver wing ftp serverAn issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure...7.8 High
- ckeditor, drupal, fedoraproject fedora +8 more +10 moreCKEditor 4.0 vulnerability in the HTML Data Processor6.1 Medium
- wftpserver wing ftp serverWing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified...7.8 High
- wftpserver wing ftp serverWing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation...7.8 High
- tecrail responsive filemanagerupload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because...9.8 Critical
- lexmark 6500e firmware, c734 firmware, c736 firmware +77 more +79 moreVarious Lexmark products have reflected XSS in the embedded web server used in older generation...5.4 Medium
- lexmark 6500e firmware, c734 firmware, c736 firmware +77 more +79 moreVarious Lexmark products have stored XSS in the embedded web server used in older generation...5.4 Medium
- citrix gateway firmwareCitrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning.5.4 Medium
- citrix gateway firmwareCitrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests.7.5 High
- citrix gateway firmwareCitrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching.5.3 Medium
- dell emc isilon onefs, isilon onefs +1 moreDell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to...9.8 Critical
- dell security management server, encryption enterprise +1 moreDell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of...8.1 High
- eset cyber security, internet security, mobile security +3 more +5 moreESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression...7.5 High
- python urllib3Uncontrolled Resource Consumption in urllib37.5 High
- Show moreLoading…