CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- gitlabAn issue was discovered in GitLab Enterprise Edition 8.11.0 through 12.0.2. By using brute-force...4.3 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition 8.3 through 12.0.2. The color codes decoder...5.9 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.2 through 12.0.2. Uploaded...6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.11 through 12.0.2. When an...4.9 Medium
- intel atom c2308, atom c2316, atom c2338 +1,319 more +1,321 moreCVE-2020-0551 does not affect BellSoft software5.6 Medium
- intel celeron 1000m, celeron 1005m, celeron 1007u +750 more +752 moreImproper data forwarding in some data cache for some Intel(R) Processors may allow an...5.6 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 9.0 and through 12.0.2. Users...4.3 Medium
- ckeditor, fedoraproject fedora, webspellchecker +2 moreA cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4...6.1 Medium
- nethackNetHack hilite_status parsing privilege escalation3.9 Low
- [red hat] networkmanager, debian linux +1 moreNetworkManager 0.9 and earlier allows local users to use other users' certificates or private...5.5 Medium
- nethackPrivilege escalation in NetHack3.9 Low
- redhat jboss application serverJBoss AS may expose root content if excluded-contexts list is mismatched7.5 High
- micron lpddr4, samsung ddr4, micron ddr4 sdram +2 moreModern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of...9.0 Critical
- openstack manilaOpenStack Manila Unprivileged users can retrieve, use and manipulate share networks8.3 High
- gitlabAn issue was discovered in GitLab Enterprise Edition and Community Edition 1.10 through 12.0.2....4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2. When...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition before 12.0.3. One of the...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.10 through 12.0.2....4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.9 and later through 12.0.2....4.3 Medium
- westerndigital sandisk x600 sd9sb8w-128g firmware, sandisk x600 sd9sb8w-1t00 firmware, sandisk x600 sd9sb8w-256g firmware +17 more +19 moreWestern Digital SanDisk X600 devices in certain configurations, a vulnerability in the access...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.3 through 11.11. It allows...7.5 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. A malicious...5.4 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.9 through 11.11. Wiki Pages...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple...9.8 Critical
- gitlabAn issue was discovered in GitLab Enterprise Edition 11.7 through 11.11. The epic details page...6.1 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.4 through 11.11. The...7.5 High
- eclipse theia, the eclipse foundation eclipse theia +1 moreInsufficient Verification of Data Authenticity in Eclipse Theia8.1 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 10.6 through 11.11. Users...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.7 through 11.11. It has...5.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Non-member...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted...4.3 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.11. A specially crafted...8.8 High
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11....6.5 Medium
- gitlabAn issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could...9.8 Critical
- citrix sd-wan center, netscaler sd-wan center +1 moreCitrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow...6.1 Medium
- hp storage essentialsIn HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote...9.8 Critical
- lexmark 6500e firmware, c748 firmware, c79x firmware +46 more +48 moreCertain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory...7.5 High
- kibokolabs chained quizcontrollers/quizzes.php in the Kiboko Chained Quiz plugin before 1.0.9 for WordPress allows...9.8 Critical
- westerndigital sandisk x300 sd7sb6s-128g firmware, sandisk x300 sd7sb6s-256g firmware, sandisk x300 sd7sb7s-010t firmware +56 more +58 moreWestern Digital SanDisk SanDisk X300, X300s, X400, and X600 devices: The firmware update...6.3 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0 through 7.0.6. An attacker who...4.3 Medium
- westerndigital sandisk x300 sd7sb6s-128g firmware, sandisk x300 sd7sb6s-256g firmware, sandisk x300 sd7sb7s-010t firmware +56 more +58 moreWestern Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling...5.5 Medium
- vestacp vesta control panelVesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command...8.8 High
- ibm infosphere information serverIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to cross-site scripting. This...5.4 Medium
- hcl software workload scheduler, ibm tivoli workload scheduler +1 moreIBM Tivoli Workload Scheduler 9.3 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- imagemagickIn ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID...5.5 Medium
- mozilla firefoxWhen a Web Extension had the all-urls permission and made a fetch request with a mode set to ...7.5 High
- google chromeIncorrect implementation in permissions in Google Chrome prior to 80.0.3987.87 allowed a remote...6.5 Medium
- google chromeInsufficient policy enforcement in CSP in Google Chrome prior to 80.0.3987.87 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in interstitials in Google Chrome prior to 80.0.3987.87 allowed a...6.5 Medium
- google chromeInappropriate implementation in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote...6.5 Medium
- Show moreLoading…