CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- atlassian application links, jira server and data center +1 moreThe EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20,...4.9 Medium
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro through 10.x has a CSV Excel Macro Injection vulnerability...9.8 Critical
- zohocorp manageengine password manager proZoho ManageEngine Password Manager Pro 10.4 and prior has no protection against Cross-site...8.8 High
- sync oxygen xml editor, oxygen xml author, oxygen xml developer +2 moreOxygen XML Editor 21.1.1 allows XXE to read any file.7.5 High
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 Critical
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow for an...7.5 High
- salesagility suitecrmSuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL...9.8 Critical
- openwrt lede, openwrt +1 moreAn issue was discovered in OpenWrt 18.06.0 to 18.06.6 and 19.07.0, and LEDE 17.01.0 to 17.01.7. A...8.1 High
- golang go, debian linux, fedoraproject fedora +1 more +3 moreHelm uses crypto package vulnerable to panic from malformed X.509 certificate7.5 High
- openwrtlibubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON...7.5 High
- citrix sd-wan center, netscaler sd-wan center +1 moreCitrix SD-WAN 10.2.x before 10.2.6 and 11.0.x before 11.0.3 has Missing SSL Certificate Validation.5.9 Medium
- sangoma freepbxAn XSS Injection vulnerability exists in Sangoma FreePBX and PBXact 13, 14, and 15 within the...4.8 Medium
- sangoma freepbxMultiple XSS vulnerabilities exist in the Backup & Restore module \ v14.0.10.2 through v14.0.10.7...4.8 Medium
- halvotec raquest** DISPUTED ** An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the...5.2 Medium
- halvotec raquest** DISPUTED ** An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the...5.4 Medium
- halvotec raquest** DISPUTED ** An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session...5.4 Medium
- cpanelcPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass...5.4 Medium
- sangoma freepbxIn Sangoma FreePBX 13 through 15 and sysadmin (aka System Admin) 13.0.92 through 15.0.13.6...7.2 High
- teampasswordmanager team password managerPost-authentication Stored XSS in Team Password Manager through 7.93.204 allows attackers to...5.4 Medium
- hp deskjet ink advantage 5000 m2u86a firmware, deskjet ink advantage 5000 m2u89b firmware, envy 5000 m2u85a firmware +5 more +7 moreA potential security vulnerability has been identified for certain HP Printers and All-in-Ones...6.5 Medium
- yargs yargs-parseryargs-parser Vulnerable to Prototype Pollution5.3 Medium
- dolibarrDolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php9.8 Critical
- umbraco cmsUnrestricted Upload of File with Dangerous Type in Umbraco CMS6.5 Medium
- jfrog artifactoryIn JFrog Artifactory before 6.18, it is not possible to restrict either system or repository...7.2 High
- umbraco cmsUmbraco CMS Authenticated File Upload8.8 High
- bitcoin coreBitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment...7.5 High
- paessler prtg network monitorA Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that...7.2 High
- traefik, traefik enterprise +1 moreTraefik has an Improper Certificate Handling issue7.5 High
- dradisframework dradisThe API in Dradis Pro 3.4.1 allows any user to extract the content of a project, even if this...6.5 Medium
- vmware horizon client, remote console, horizon client for windows +3 more +5 moreFor VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for...7.8 High
- unraidUnraid 6.8.0 allows authentication bypass.7.5 High
- unraidUnraid through 6.8.0 allows Remote Code Execution.9.8 Critical
- artica pandora fmsindex.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows...7.2 High
- vmware fusion, workstation +1 moreVMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after...8.8 High
- vmware fusion, workstation +1 moreLinux Guest VMs running on VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2...7.8 High
- openwrtuhttpd in OpenWrt through 18.06.5 and 19.x through 19.07.0-rc2 has an integer signedness error....7.5 High
- combodo itopA post-authentication privilege escalation in the web application of Combodo iTop before 2.7...8.1 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has a Heap-Based Buffer Overflow, as demonstrated by interpretation of a small...7.5 High
- fedoraproject fedora, nagios remote plug in executor +1 moreNagios NRPE 3.2.1 has Insufficient Filtering because, for example, nasty_metachars interprets \n...7.3 High
- thimpress learnpressbe_teacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress...6.5 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL...9.8 Critical
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the...6.1 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of...8.8 High
- opcfoundation netstandard.opc.ua, ua-.netstandard +1 moreInsufficient Nonce Validation in Eclipse Milo Client7.4 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Missing length checks in the user table can...5.3 Medium
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Incorrect Access Control in the SQL fieldtype...8.8 High
- joomla joomla\!An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the...7.5 High
- rockwellautomation rslogix 500, micrologix 1100 firmware, micrologix 1400 a firmware +1 more +3 moreRockwell Automation MicroLogix 1400 Controllers Series B v21.001 and prior, Series A, all...7.5 High
- Show moreLoading…