CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- zohocorp manageengine opmanagerZoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted...9.8 Critical
- untis webuntisUntis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.8.8 High
- facebook osqueryIncorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.9.1 Critical
- trend micro password manager for windows, trendmicro password manager +1 moreTrend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability...7.8 High
- gitlabGitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email...5.3 Medium
- querymen project querymenImproperly Controlled Modification of Dynamically-Determined Object Attributes in querymen5.3 Medium
- mediawikiIn the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related...9.8 Critical
- fortinet fortisiemA Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2...8.8 High
- huawei usg6000v, usg6000v firmware +1 moreHuawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an...7.5 High
- huawei honor v30, honor v30 firmware +1 moreHuawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have...5.5 Medium
- operaOpera through 53 on Android allows Address Bar Spoofing. Characters from several languages are...4.3 Medium
- fortinet forticlient, forticlientwindows +1 moreAn unquoted service path vulnerability in the FortiClient FortiTray component of...9.8 Critical
- fortinet fortiisolatorAn improper neutralization of input vulnerability in the URL Description in Fortinet...5.4 Medium
- fortinet fortiwebAn Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in...6.1 Medium
- intel intel® smart sound technology, smart sound technology +1 moreImproper access control in the subsystem for Intel(R) Smart Sound Technology may allow an...8.8 High
- polycom hdx system softwareAn issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the...7.2 High
- intel compute stick stck1a32wfc firmware, compute stick stck1a8lfc firmware, compute stick stk1a32sc firmware +68 more +70 moreImproper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to...7.8 High
- torpedoquery torpedo queryVulnerability in Torpedo Query9.8 Critical
- intel intel(r) max(r) 10 fpga, max 10 fpga firmware +1 moreImproper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an...5.9 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreImproper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreUncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an...7.8 High
- bluez, canonical ubuntu linux, debian linux +1 more +3 moreImproper access control in subsystem for BlueZ before version 5.53 may allow an unauthenticated...7.1 High
- intel intel® optane(tm) dc persistent memory module management software, optane dc persistent memory module management +1 moreUnquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software...7.8 High
- bitcoin corebitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled...7.5 High
- bitcoin corebitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via...5.3 Medium
- yii2cmf project yii2cmfCross-site Scripting in yii2cmf6.1 Medium
- bitcoin corebitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker...5.9 Medium
- intel compute stick stck1a32wfc firmware, compute stick stck1a8lfc firmware, compute stick stk1a32sc firmware +68 more +70 moreImproper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially...6.7 Medium
- intel graphics driver, intel(r) graphics drivers +1 morePath traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40...7.8 High
- nvidia gpu display driver, virtual gpu graphics driver +1 moreNVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource...5.5 Medium
- nvidia virtual gpu manager, gpu display driver +1 moreNVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a...5.5 Medium
- nvidia virtual gpu manager, gpu display driver +1 moreNVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreImproper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreOut-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an...5.3 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreImproper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreUncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreImproper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreUncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreIncorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15...7.8 High
- watchguard ad helper firmwareThe AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to...7.5 High
- icu-project international components for unicode, canonical ubuntu linux, debian linux +11 more +13 moreAn issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An...8.8 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor in Ansible3.9 Low
- intel graphics driver, intel(r) graphics drivers +1 moreImproper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreImproper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38...6.1 Medium
- intel field programmable gate array programmable acceleration card n3000 firmware, intel(r) fpga programmable acceleration card n3000 +1 moreImproper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card...4.4 Medium
- intel field programmable gate array programmable acceleration card n3000 firmware, intel(r) fpga programmable acceleration card n3000 +1 moreImproper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000...6.7 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreBuffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an...5.5 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreImproper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an...5.3 Medium
- intel graphics driver, intel(r) graphics drivers +1 moreBuffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26...7.8 High
- intel graphics driver, intel(r) graphics driver +1 moreImproper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077...2.3 Low
- Show moreLoading…