CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...5.5 Medium
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...5.5 Medium
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmwareAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’...7.8 High
- wago pfc200 firmware, pfc200 +1 moreAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...5.5 Medium
- xcritical.software utilitifyImproperly Controlled Modification of Dynamically-Determined Object Attributes in utilitify8.8 High
- perforce puppet enterprise, puppet server, enterprise +1 more +3 morePuppet Server and PuppetDB provide useful performance and debugging information via their metrics...7.5 High
- substack minimist, opensuse leap +1 morePrototype Pollution in minimist5.6 Medium
- nvidia gpu display driver, geforce experience, quadro firmware +1 more +3 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control...7.8 High
- apache shardingsphere, apache software foundation shardingsphere(incubator) +1 moreDeserialization of Untrusted Data in Apache ShardingSphere9.8 Critical
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution Vulnerability9.9 Critical
- palo alto networks pan-osPAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalation8.1 High
- palo alto networks pan-osPAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commands7.8 High
- palo alto networks pan-osPAN-OS: Predictable temporary filename vulnerability allows local privilege escalation7.0 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File5.0 Medium
- zohocorp manageengine desktop centralAn XML external entity (XXE) vulnerability iin Zoho ManageEngine Desktop Central before the 07...9.8 Critical
drupal/saml_spPackagistThis module enables you to authenticate Drupal users using an external SAML Identity Provider. If the site is configured to allow visitors to register for user accounts but administrator approval is r…No score- apache wss4j, red hat jbossws, apache cxf +8 more +10 moreUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4J5.9 Medium
- sumavision enhanced multimedia router (emr), enhanced multimedia router firmware +1 moregoform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of...9.8 Critical
- systemdsystemd 37-1 does not properly handle non-existent services, which causes a denial of service ...5.5 Medium
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...9.8 Critical
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...5.3 Medium
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...6.5 Medium
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...8.8 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...7.5 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...7.5 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...7.5 High
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...9.8 Critical
- moxa mb3170 firmware, mb3180 firmware, mb3270 firmware +3 more +5 moreAn issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480...6.2 Medium
- technicolor tc7337net firmwareTechnicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by...9.8 Critical
- fatfreeframework fat-free frameworkFat-Free Framework arbitrary code execution9.8 Critical
- abacusoauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11...6.1 Medium
- phpbbphpBB Cross-Site Request Forgery (CSRF)4.3 Medium
- wpforms contact formA stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms...5.4 Medium
- mozilla firefoxMozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of...9.8 Critical
- mozilla firefoxWhen protecting CSS blocks with the nonce feature of Content Security Policy, the @import...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe first time AirPods are connected to an iPhone, they become named after the user's name by...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a...8.8 High
- mozilla firefoxAfter a website had entered fullscreen mode, it could have used a previously opened popup to...4.3 Medium
- mozilla firefoxWhen a JavaScript URL (javascript:) is evaluated and the result is a string, this string is...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreBy carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the...8.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreWhen removing data about an origin whose tab was recently closed, a use-after-free could occur in...8.8 High
- wago e!cockpit, e\!cockpit +1 moreA hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e...5.5 Medium
- Show moreLoading…