CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- aquaforest tiff serverAquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.7.5 High
- aquaforest tiff serverAquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.7.5 High
- aquaforest tiff serverAquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver...5.3 Medium
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. An out-of-bounds read...5.5 Medium
- deltaww cncsoft screeneditorDelta Industrial Automation CNCSoft ScreenEditor, v1.00.96 and prior. Multiple stack-based buffer...7.8 High
- zulipchat zulip desktopZulip Desktop before 4.0.3 loaded untrusted content in an Electron webview with web security...6.1 Medium
- [unknown] moodleMoodle XSS Vulnerability6.1 Medium
- [unknown] moodleMoodle reflected Cross-site Scripting (XSS)6.1 Medium
- [unknown] moodleMoodle Email media URL tokens were not checking for user status3.7 Low
- [unknown] moodleMoodle open redirect vulnerability3.1 Low
- armorx lisomailArmorX LisoMail - SQL Injection9.8 Critical
apportUbuntuapport regressionNo score- entrustdatacard entelligence security providerEntrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during...4.3 Medium
- facebook thriftGolang Facebook Thrift servers vulnerable to denial of service7.5 High
- trendmicro worry-free business security, trend micro worry-free business security (wfbs) +1 moreTrend Micro Worry-Free Business Security (9.0, 9.5, 10.0) is affected by a directory traversal...9.8 Critical
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 moreTrend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could...9.8 Critical
- trendmicro apex one, officescan, worry-free business security +1 more +3 moreTrend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0)...9.8 Critical
- trendmicro apex one, officescan, worry-free business security +1 more +3 moreTrend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0)...7.5 High
- trendmicro apex one, officescan, worry-free business security +2 more +4 moreTrend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0)...8.8 High
- trendmicro apex one, officescan, trend micro apex one and officescan +1 more +3 moreA migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a...8.8 High
- libvnc project libvncserver, canonical ubuntu linux, debian linux +6 more +8 morelibvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and...9.8 Critical
- vmware fusion, horizon client, remote console +1 more +3 moreVMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1)...7.8 High
- vmware horizon client, workstation +1 moreVMware Workstation (15.x before 15.5.2) and Horizon Client for Windows (5.x and prior before 5.4...3.8 Low
- intelliants subrionSubrion CMS CSRF Vulnerability8.8 High
- opencartCross-site Scripting in OpenCart5.4 Medium
- cpanelcPanel before 84.0.20 allows a webmail or demo account to delete arbitrary files (SEC-547).6.5 Medium
- cpanelcPanel before 84.0.20 allows a demo account to achieve code execution via PassengerApps APIs (SEC...9.8 Critical
- cpanelcPanel before 84.0.20 allows resellers to achieve remote code execution as root via a cpsrvd...7.2 High
- cpanelcPanel before 84.0.20 allows a demo account to achieve remote code execution via a cpsrvd rsync...9.8 Critical
- cpanelcPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543).9.1 Critical
- cpanelcPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542).9.1 Critical
- cpanelcPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo...5.3 Medium
- cpanelcPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via...7.2 High
- cpanelcPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535).6.1 Medium
- cpanelcPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515).6.1 Medium
- cpanelcPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is...9.8 Critical
- cpanelcPanel before 82.0.18 allows stored XSS via WHM Backup Restoration (SEC-533).5.4 Medium
- cpanelcPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log...5.5 Medium
- cpanelcPanel before 82.0.18 allows attackers to read an arbitrary database via MySQL dump streaming ...6.5 Medium
- cpanelIn cPanel before 82.0.18, Cpanel::Rand::Get can produce a predictable series of numbers (SEC-525).3.3 Low
- cpanelcPanel before 82.0.18 allows self-XSS because JSON string escaping is mishandled (SEC-520).6.1 Medium
- cpanelcPanel before 82.0.18 allows authentication bypass because of misparsing of the format of the...8.8 High
- cpanelcPanel before 82.0.18 allows authentication bypass because webmail usernames are processed...8.8 High
- incsub hustleThe Hustle (aka wordpress-popup) plugin through 6.0.5 for WordPress allows Directory Traversal to...5.3 Medium
- paessler prtg network monitorA Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and...7.2 High
- r-consortium rmysqlRMySQL through 0.10.19 allows SQL Injection.9.8 Critical
- pydioA problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object...8.8 High
- pydioA problem was found in Pydio Core before 8.2.4 and Pydio Enterprise before 8.2.4. A PHP object...8.8 High
- fortinet fortiwebAn improper neutralization of input vulnerability in FortiWeb allows a remote authenticated...5.4 Medium
- atlassian jira software, jira data center, jira server +2 moreThe ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version...4.3 Medium
- Show moreLoading…