CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...9.8 Critical
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...3.3 Low
- control-webpanel webpanelCentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the ...9.8 Critical
- nagiosNagios Log Server 2.1.3 has Incorrect Access Control.6.5 Medium
- nagiosNagios Log Server 2.1.3 has CSRF.8.8 High
- nagiosNagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is...5.4 Medium
- ibm mq, mq appliance, websphere mq +2 moreIBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local...5.1 Medium
- ibm mq, mq appliance, websphere mq +2 moreIBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD is vulnerable to a denial...6.5 Medium
- ibm mq, mq appliance, websphere mq +2 moreIBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local...5.1 Medium
- ibm cloud automation managerIBM Cloud Automation Manager 3.2.1.0 does not renew a session variable after a successful...5.9 Medium
- swisscom centro business, centro grande firmware +1 moreMissing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business...7.5 High
- swisscom centro grande firmwareMissing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to...5.4 Medium
- swisscom centro grande firmwareIncorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro...7.2 High
- red hat ansible, redhat ansible tower, cloudforms management engine +1 more +3 moreArgument Injection in Ansible3.9 Low
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...4.8 Medium
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible3.9 Low
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 morePath Traversal in Ansible4.2 Medium
- red hat ansible, fedoraproject fedora, redhat ansible tower +2 more +4 moreIncorrect Permission Assignment for Critical Resource in Ansible2.2 Low
- dolibarrDolibarr ERP and CRM contain XSS Vulnerability6.1 Medium
- dolibarrDolibarr ERP and CRM contain XSS Vulnerability5.4 Medium
- red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 High
- dolibarrDolibarr ERP and CRM SQLi7.5 High
- codiadCode injection in codiad9.8 Critical
- limesurveyLimeSurvey 3.17.7+190627 has XSS via Boxes in application/extensions/PanelBoxWidget/views/box.php...6.1 Medium
- contaoCross-site Scripting in Contao6.1 Medium
- red hat ansible, redhat ansible engine, debian linux +2 more +4 moreInsertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible5.0 Medium
- easyappointments easy\!appointmentsEasy!Appointments 1.3.0 has a Missing Authorization issue allowing retrieval of hashed passwords...7.5 High
- easyappointments easy\!appointmentsEasy!Appointments 1.3.0 has a Guessable CAPTCHA issue.6.5 Medium
- atutor acontentAn issue was discovered in AContent through 1.4. It allows the user to run commands on the server...8.8 High
- apache geodeApache Geode SSL endpoint verification vulnerability7.4 High
- microfocus service manager, micro focus international service manager (web tier). +1 moreLogin filter can access configuration files vulnerability in Micro Focus Service Manager (Web...5.3 Medium
- microfocus service manager, micro focus international service manager (server). +1 moreHTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server),...5.3 Medium
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreResource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi...9.8 Critical
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability...8.8 High
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreTCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D...9.8 Critical
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreNull Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi...9.8 Critical
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreTCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D...9.8 Critical
- mitsubishi electric corporation electric melqic iu1 series, mitsubishielectric iu1-1m20-d firmware +1 moreBuffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC...9.8 Critical
- fortinet fortiap, fortiap-s, fortiap-u +2 more +4 moreA system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below,...6.7 Medium
- fortinet fortimanagerAn Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0...8.8 High
- fortinet fortiosAn improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0...6.1 Medium
- fortinet forticlient emergency management server, forticlientems +1 moreAn Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow...7.5 High
- fortinet forticlient, forticlient virtual private network, forticlientwindows +2 moreAn Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below...7.1 High
- closure-compiler-stream project closure-compiler-streamOS Command Injection in closure-compiler-stream9.8 Critical
- gulp-styledocco project gulp-styledoccoOS Command Injection in gulkp-styledocco9.8 Critical
- gulp-tape project gulp-tapeOS Command Injection in gulp-tape9.8 Critical
- docker-compose-remote-api project docker-compose-remote-apiOS Command Injection in docker-compose-remote-api9.8 Critical
- pulverizr project pulverizrOS Command Injection in pulverizr9.8 Critical
- node-prompt-here project node-prompt-hereOS Command Injection in node-prompt-here9.8 Critical
- Show moreLoading…