CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by one or more stack...9.8 Critical
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...9.8 Critical
- kyocera ecosys m5526cdw firmwareThe web application of some Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) was...7.5 High
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer...8.8 High
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer...9.8 Critical
- kyocera ecosys m5526cdw firmwareThe web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701)...6.1 Medium
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) did not implement any...6.5 Medium
- kyocera ecosys m5526cdw firmwareThe web application of several Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701)...6.1 Medium
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer...9.8 Critical
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer...9.8 Critical
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by an integer...8.8 High
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by multiple...9.8 Critical
- kyocera ecosys m5526cdw firmwareAll configuration parameters of certain Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000...7.5 High
- kyocera ecosys m5526cdw firmwareSome Kyocera printers (such as the ECOSYS M5526cdw 2R7_2000.001.701) were affected by a buffer...8.8 High
- netgear cg3700b firmwareThe Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses the same default 8 character...7.5 High
- netgear cg3700b firmwareThe Voo branded NETGEAR CG3700b custom firmware V2.02.03 uses HTTP Basic Authentication over...9.8 Critical
- netgear cg3700b firmwareThe Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs....8.8 High
- gitlabGitLab EE 12.4.2 through 12.8.1 allows Denial of Service. It was internally discovered that a...7.5 High
- gitlabGitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a...9.8 Critical
- gitlabGitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially...6.1 Medium
- gitlabGitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered...6.1 Medium
- gitlabGitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular...9.8 Critical
- gitlabGitLab 12.1 through 12.8.1 allows XSS. The merge request submission form was determined to have a...6.1 Medium
- gitlabGitLab 7.10 through 12.8.1 has Incorrect Access Control. Under certain conditions where users...5.3 Medium
- gitlabGitLab 8.3 through 12.8.1 allows Information Disclosure. It was possible for certain non-members...5.3 Medium
- gitlabGitLab before 12.8.2 has Incorrect Access Control. It was internally discovered that the LFS...6.5 Medium
- gitlabGitLab 12.2 through 12.8.1 allows Denial of Service. A denial of service vulnerability impacting...5.3 Medium
- gitlabGitLab 12.7 through 12.8.1 has Insecure Permissions. Under certain conditions involving groups,...9.1 Critical
- gitlabGitLab EE 11.6 through 12.8.1 allows Information Disclosure. Sending a specially crafted request...5.3 Medium
- gitlabGitLab 12.3.5 through 12.8.1 allows Information Disclosure. A particular view was exposing merge...5.3 Medium
- gitlabGitLab 10.4 through 12.8.1 allows Directory Traversal. A particular endpoint was vulnerable to a...5.3 Medium
- gitlabGitLab before 12.8.2 allows Information Disclosure. Badge images were not being proxied, causing...7.5 High
- gitlabGitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it...8.1 High
- gitlabGitLab 8.11 through 12.8.1 allows a Denial of Service when using several features to recursively...7.5 High
- gitlabGitLab 11.7 through 12.8.1 allows Information Disclosure. Under certain group conditions, group...5.3 Medium
- sapplica sentrifugoA Blind SQL Injection issue was discovered in Sapplica Sentrifugo 3.2 via the index.php...6.5 Medium
- gitlabGitLab 9.3 through 12.8.1 allows XSS. A cross-site scripting vulnerability was found when viewing...6.1 Medium
- zohocorp manageengine applications managerZoho ManageEngine Applications Manager 14590 and before allows a remote unauthenticated attacker...5.3 Medium
- gitlabGitLab 12.1 through 12.8.1 allows XSS. A cross-site scripting vulnerability was present in a...6.1 Medium
- safescan ta-8010 firmware, ta-8015 firmware, ta-8020 firmware +4 more +6 moreDirectory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated...9.8 Critical
- sygnoos popup builderThe popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings...6.3 Medium
- sygnoos popup builderAn XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote...6.1 Medium
- lenovo xclarity administrator (lxca), xclarity administrator +1 moreAn internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS...7.9 High
- netapp storagegrid, storagegrid (formerly storagegrid webscale) +1 moreStorageGRID (formerly StorageGRID Webscale) versions 10.0.0 through 11.3 prior to 11.2.0.8 and 11...7.5 High
- fortinet fortiadcAn improper neutralization of input vulnerability in Fortinet FortiADC 5.3.3 and earlier may...5.4 Medium
- fortinet fortiwebAn information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an...6.5 Medium
- apache commons configuration, oracle database server, healthcare foundation +2 moreRemote code execution in Apache Commons Configuration10.0 Critical
- primetek primefacesCross-site Scripting in PrimeFaces6.1 Medium
- invisioncommunity invision power board, microsoft internet explorer +1 moreInvision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used,...6.1 Medium
spacewalk-setupSUSERecommended update for SUSE Manager Server 3.2No score- Show moreLoading…