CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- google androidIn the netlink driver, there is a possible out of bounds write due to a race condition. This...6.4 Medium
- google androidIn SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This...7.3 High
- google androidIn StatsService::command of StatsService.cpp, there is possible memory corruption due to a race...6.4 Medium
- google androidIn Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio...5.5 Medium
- google androidIn setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly...7.5 High
- google androidIn query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due...4.4 Medium
- google androidIn btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out...5.5 Medium
- google androidIn l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect...4.4 Medium
- google android, huawei berkeley-l09 firmware, columbia-al10b firmware +27 more +29 moreIn the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds...7.8 High
- google androidIn set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds...4.4 Medium
- google androidIn authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing...4.4 Medium
- google androidIn fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due...4.4 Medium
- android kernel, google android +1 moreIn binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect...7.8 High
- google androidIn rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a...7.5 High
- google androidIn rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a...7.5 High
- google androidIn rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing...7.5 High
- google androidIn hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions...7.8 High
- google androidIn query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing...5.5 Medium
- google androidIn CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to...7.8 High
- google androidIn ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to...8.8 High
- google androidIn triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for...5.0 Medium
- google androidIn the WifiConfigManager, there is a possible storage of location history which can only be...2.3 Low
- google androidIn fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to...6.7 Medium
- google androidIn get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing...6.7 Medium
- google androidIn fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a...6.7 Medium
- johnson controls kantech entrapass corporate edition, kantech entrapass global edition, johnsoncontrols entrapass +2 moreKantech EntraPass Improper Input Validation9.8 Critical
- johnnson controls metasys system configuration tool (sct), johnson controls metasys application and data server (ads, ads-lite), metasys extended application and data server (adx) +20 more +22 moreMetasys Improper Restriction of XML External Entity Reference7.5 High
- siemens ag spectrum power™ 5, siemens spectrum power 5 +1 moreA vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web...6.1 Medium
- siemens scalance s602, scalance s612, scalance s623 +5 more +7 moreA vulnerability has been identified in SCALANCE S602 (All versions >= V3.0), SCALANCE S612 (All...6.1 Medium
- siemens sinvr/sivms video server, sinvr\/sivms video server +1 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...7.5 High
- siemens sinvr/sivms video server, sinvr\/sivms video server +1 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...7.5 High
- siemens sinvr/sivms video server, sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...7.5 High
- siemens sinvr/sivms video server, sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...6.8 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...4.3 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...6.3 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...6.1 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...8.8 High
- siemens control center server (ccs), sinvr/sivms video server, sinvr 3 central control server +1 more +3 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...5.3 Medium
- siemens control center server (ccs), sinvr 3 central control server, sinvr 3 video server +2 moreA vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR...6.5 Medium
- siemens openpcs 7 v8.1, openpcs 7 v8.2, openpcs 7 v9.0 +25 more +27 moreA vulnerability has been identified in OpenPCS 7 V8.1 (All versions), OpenPCS 7 V8.2 (All...7.5 High
- siemens simatic et 200sp open controller cpu 1515sp pc2 (incl. siplus variants), simatic s7-1500 cpu family (incl. related et200 cpus and siplus variants), simatic s7-1500 software controller +14 more +16 moreA vulnerability has been identified in SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl....7.5 High
- siemens siprotec 4, siprotec compact, siemens ag siprotec 4 and siprotec compact relays equipped with en100 ethernet communication modules +2 moreA vulnerability has been identified in SIPROTEC 4 and SIPROTEC Compact relays equipped with EN100...7.5 High
- siemens siport mpA vulnerability has been identified in SIPORT MP (All versions < 3.1.4). Vulnerable versions of...6.5 Medium
- siemens simatic s7-300 cpu family (incl. related et200 cpus and siplus variants), simatic tdc cp51m1, simatic tdc cpu555 +12 more +14 moreA vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and...7.5 High
user_agent_parserRubyGemsDenial of Service in uap-core when processing crafted User-Agent stringsNo score- dojo, debian linux, oracle communications application session controller +7 more +9 morePrototype pollution in dojo7.7 High
- dojo dojoxPrototype Pollution in Dojox7.7 High
- qemuhw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation...5.8 Medium
- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user...4.3 Medium
- gitlabAn issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project...7.5 High
- Show moreLoading…