CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- gulp-scss-lint project gulp-scss-lintOS Command Injection in gulp-scss-lint9.8 Critical
- styria django-rest-framework-json web tokensDjango Rest Framework jwt allows obtaining new token from notionally invalidated token9.1 Critical
- google androidIn Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could...7.5 High
- google androidIn Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could...7.5 High
- google androidIn parseTrackFragmentRun of MPEG4Extractor.cpp, there is a possible resource exhaustion due to...6.5 Medium
- google androidIn readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow....9.8 Critical
- google androidIn libAACdec, there is a possible out of bounds read. This could lead to remote information...6.5 Medium
- google androidIn StatsService, there is a possible out of bounds read. This could lead to local information...5.5 Medium
- google androidIn app uninstallation, there is a possible set of permissions that may not be removed from a...7.8 High
- google androidIn overlay notifications, there is a possible hidden notification due to improper input...7.3 High
- walmart concordExposure of Sensitive Information to an Unauthorized Actor in Concord7.5 High
- v2rayl project v2raylv2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned...7.8 High
- v2rayl project v2raylv2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL...7.8 High
- yarnpkg yarnTOCTOU Race Condition in Yarn5.9 Medium
- mxlinux mx linux, antixlinux antix linux +1 moreantiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh...7.8 High
- q-cms qcmsAn arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3...7.5 High
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus_audiobridge.c has a double mutex unlock...7.5 High
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't...9.8 Critical
- meetecho janusAn issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin...5.9 Medium
- meetecho janusAn issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that...4.8 Medium
- meetecho janusAn issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin...4.2 Medium
- psd-tools project psd-toolsPotential buffer overflow in psd-tools9.8 Critical
- onthegosystems sitepress-multilingual-cmsThe sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a...8.8 High
- freebsdgrub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the...7.8 High
- freebsdgrub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading...7.8 High
- tecrail responsive filemanagerAn issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in...9.8 Critical
- iptanus wordpress file uploadAn issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory...9.8 Critical
- lab digital wagtail-2fa2FA bypass through deleting devices in wagtail-2fa7.6 High
- thoughtbot administrateSort order SQL injection in Administrate7.7 High
- devome grrAn issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.7.2 High
- devome grrAn issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.9.8 Critical
- dell wyse management suiteDell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting...6.4 Medium
- dell wyse management suiteDell Wyse Management Suite versions prior to 1.4.1 contain a stored cross-site scripting...6.4 Medium
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerability....9.0 Critical
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO XMS versions prior to 6.3.0 contain an incorrect permission assignment...6.7 Medium
- dell xtremio, xtremio management server +1 moreDell EMC XtremIO XMS versions prior to 6.3.0 contain an information disclosure vulnerability...6.7 Medium
- halvotec raquestAn issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows...7.5 High
- ricoh sp c250dn firmware, sp c250sf firmware, sp c252dn firmware +1 more +3 moreRicoh SP C250DN 1.05 devices have an Authentication Method Vulnerable to Brute Force Attacks....9.8 Critical
- ricoh sp c250dn firmware, sp c250sf firmware, sp c252dn firmware +1 more +3 moreRicoh SP C250DN 1.05 devices allow denial of service (issue 1 of 3). Some Ricoh printers were...7.5 High
- ricoh sp c250dn firmware, sp c250sf firmware, sp c252dn firmware +1 more +3 moreRicoh SP C250DN 1.05 devices have a fixed password. FTP service credential were found to be...7.5 High
- ricoh sp c250dn firmware, sp c250sf firmware, sp c252dn firmware +1 more +3 moreRicoh SP C250DN 1.05 devices allow denial of service (issue 2 of 3). Unauthenticated crafted...9.8 Critical
- brother ads-2400n firmware, ads-2800w firmware, ads-3000n firmware +297 more +299 moreSome Brother printers (such as the HL-L8360CDW v1.20) were affected by a heap buffer overflow...9.8 Critical
- brother ads-2400n firmware, ads-2800w firmware, ads-3000n firmware +297 more +299 moreSome Brother printers (such as the HL-L8360CDW v1.20) were affected by a stack buffer overflow...8.8 High
- brother ads-2400n firmware, ads-2800w firmware, ads-3000n firmware +297 more +299 moreSome Brother printers (such as the HL-L8360CDW v1.20) were affected by different information...7.5 High
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...9.8 Critical
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement account lockout....7.5 High
- xerox phaser 3320 firmwareMultiple Stored XSS vulnerabilities were found in the Xerox Web Application, used by the Phaser...6.1 Medium
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...9.8 Critical
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) were affected by a buffer overflow...9.8 Critical
- xerox phaser 3320 firmwareSome Xerox printers (such as the Phaser 3320 V53.006.16.000) did not implement any mechanism to...6.5 Medium
- Show moreLoading…