CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- wago e!cockpit, e\!cockpit +1 moreA cleartext transmission vulnerability exists in the network communication functionality of WAGO...7.5 High
- wago pfc100 firmware, pfc200 firmware +1 moreAn exploitable regular expression without anchors vulnerability exists in the Web-Based...7.5 High
- wago pfc200 firmwareAn exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality...9.1 Critical
- blamer project blamerImproper Neutralization of Special Elements used in an OS Command in Blamer9.8 Critical
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the cloud connectivity functionality of...7.2 High
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the Cloud Connectivity functionality of...7.2 High
- wago e!cockpit, e\!cockpit +1 moreAn exploitable firmware downgrade vulnerability exists in the firmware update package...7.8 High
- wago e!cockpit, e\!cockpit +1 moreAn exploitable improper input validation vulnerability exists in the firmware update...7.8 High
- wago pfc200 firmwareAn exploitable improper host validation vulnerability exists in the Cloud Connectivity...9.1 Critical
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmwareAn exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc100 firmware, pfc200 firmware +1 moreAn exploitable timing discrepancy vulnerability exists in the authentication functionality of the...5.3 Medium
- wago pfc100 firmware, pfc200 firmware +1 moreThe WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and...7.5 High
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO...7.2 High
- facebook thriftC++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes...7.5 High
- facebook thriftJava Facebook Thrift servers would not error upon receiving messages declaring containers of...7.5 High
- ramp altimeterRamp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping...5.4 Medium
- sap fiori launchpadSAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and...4.7 Medium
- sap disclosure managementSAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an...7.2 High
- sap crystal reports, sap se business objects business intelligence platform (crystal reports) +1 moreSAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows...7.5 High
- sap solution manager, sap se solution manager (user experience monitoring) +1 moreSAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication...10.0 Critical
- sap cloud platform integration, sap se cloud platform integration for data services +1 moreSAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected...4.7 Medium
- sap netweaver as abap business server pages, sap se netweaver application server abap (smart forms) - sap basis +1 moreSAP NetWeaver AS ABAP Business Server Pages (Smart Forms), SAP_BASIS versions- 7.00, 7.01, 7.02,...6.1 Medium
- sap treasury and risk management \(ea-finserv\), treasury and risk management \(s4core\), sap se treasury and risk management (transaction management) (ea-finserv) +1 more +3 moreThe selection query in SAP Treasury and Risk Management (Transaction Management) (EA-FINSERV...4.3 Medium
- sap netweaver, sap se netweaver uddi server (services registry) +1 moreSAP NetWeaver UDDI Server (Services Registry), versions- 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50...9.1 Critical
- sap netweaver application server java, sap se netweaver application server java (user management engine) +1 moreSAP NetWeaver Application Server Java (User Management Engine), versions- 7.10, 7.11, 7.20, 7.30,...5.5 Medium
- sap commerce cloud, sap se commerce cloud (testweb extension) +1 moreThe SAP Commerce (Testweb Extension), versions- 6.6, 6.7, 1808, 1811, 1905, does not sufficiently...6.1 Medium
- sap commerce cloud, sap se commerce cloud (smartedit extension) +1 moreThe SAP Commerce (SmartEdit Extension), versions- 6.6, 6.7, 1808, 1811, is vulnerable to client...5.4 Medium
- sap erp, sap se erp (eappglo), erp (sap fin) +1 more +3 moreThe view FIMENAV_COMPCERT in SAP ERP (MENA Certificate Management), EAPPGLO version 607, SAP_FIN...5.4 Medium
- sap solution manager, sap se solution manager (diagnostics agent) +1 moreSAP Solution Manager (Diagnostics Agent), version 720, allows unencrypted connections from...9.8 Critical
- sap enable nowSAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The...3.8 Low
- sap businessobjects mobile, sap se businessobjects mobile (mobilebiservice) +1 moreSAP BusinessObjects Mobile (MobileBIService), version 4.2, allows an attacker to generate...7.5 High
- sap enable nowSAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be...5.4 Medium
- google androidIn btm_process_inq_results of btm_inq.cc, there is a possible out of bounds read due to a missing...5.5 Medium
- google androidIn btu_hcif_connection_comp_evt of btu_hcif.cc, there is a possible out of bounds read due to a...5.5 Medium
- google androidIn l2c_link_process_num_completed_pkts of l2c_link.cc, there is a possible out of bounds read due...5.5 Medium
- google androidIn WifiNetworkSuggestionsManager of WifiNetworkSuggestionsManager.java, there is a possible...7.8 High
- google androidIn convertHidlNanDataPathInitiatorRequestToLegacy, and...6.7 Medium
- google androidIn smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to...4.3 Medium
- google androidIn setBluetoothTethering of PanService.java, there is a possible permission bypass due to a...7.8 High
- google androidIn onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead...7.8 High
- google androidIn nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper...6.7 Medium
- google androidIn onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to...6.5 Medium
- google androidIn onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to...5.5 Medium
- google androidIn setMasterMute of AudioService.java, there is a missing permission check. This could lead to...3.3 Low
- google androidIn DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to...7.8 High
- google androidIn getProcessPss of ActivityManagerService.java, there is a possible side channel information...5.5 Medium
- google androidIn several functions of NotificationManagerService.java, there are missing permission checks....7.8 High
- google androidIn Euicc, there is a possible information disclosure due to an included test Certificate. This...7.5 High
- Show moreLoading…