CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typing8.8 High
- mcafee network security management (nsm), network security manager +1 moreNetwork Security Management (NSM) - Cross site scripting vulnerability4.8 Medium
- mcafee network security management (nsm), network security manager +1 moreNetwork Security Management (NSM) - Cross site scripting vulnerability4.8 Medium
- logicaldocLogicalDoc before 8.3.3 could allow an attacker to upload arbitrary files, leading to command...9.8 Critical
- claranova adaware antivirusAdaware antivirus 12.6.1005.11662 and 12.7.1055.0 has a quarantine flaw that allows privilege...7.8 High
- docker desktopDocker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the...6.7 Medium
- igniterealtime openfireIgnite Realtime Openfire allows Cross-site Scripting6.1 Medium
- dell data protection central, emc data protection central, emc integrated data protection appliance +2 moreData Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper...7.5 High
- dell data protection advisor, emc data protection advisor, emc integrated data protection appliance firmware +2 moreDell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19...9.1 Critical
- dell data protection advisor, emc data protection advisor, emc integrated data protection appliance firmware +2 moreDell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19...9.1 Critical
- open.edx ironwoodOpen edX Ironwood.1 allows support/certificates?course_id= reflected XSS.6.1 Medium
- frappe erpnextERPNext 11.1.47 allows blog?blog_category= Frame Injection.4.7 Medium
- graphicsmagick, debian linux, opensuse backports sle +1 more +3 moreIn GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read...6.5 Medium
- solarwinds serv-u managed file transferSolarWinds Serv-U Managed File Transfer (MFT) Web client before 15.1.6 Hotfix 2 is vulnerable to...8.8 High
- readdle sparkThe Spark application through 2.0.2 for Android allows XSS via an event attribute and arbitrary...6.1 Medium
- typeappThe TypeApp application through 1.9.5.35 for Android allows XSS via an event attribute and...6.1 Medium
- edison mailThe Edison Mail application through 1.7.1 for Android allows XSS via an event attribute and...6.1 Medium
- blixhq bluemailThe BlueMail application through 1.9.5.36 for Android allows XSS via an event attribute and...6.1 Medium
- frappeIn core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with...7.5 High
- 9folders nineThe Nine application through 4.5.3a for Android allows XSS via an event attribute and arbitrary...6.1 Medium
- cloudmagic newtonThe Newton application through 10.0.23 for Android allows XSS via an event attribute and...6.1 Medium
- onap open network automation platformAn issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID...9.1 Critical
- onap open network automation platformAn issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia...9.1 Critical
- onap open network automation platformAn issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted...8.8 High
- onap open network automation platformAn issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL...6.5 Medium
- onap open network automation platformAn issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using...7.5 High
- onap open network automation platformAn issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP SDC through Dublin. By accessing port 7001 of demo-sdc-sdc-wfd-be...9.8 Critical
drupal/corePackagistThe Drupal project uses the third-party library CKEditor, which has released a security improvement that is needed to protect some Drupal configurations. Vulnerabilities are possible if Drupal is conf…No score- onap open network automation platformAn issue was discovered in ONAP SDC through Dublin. By accessing port 4001 of demo-sdc-sdc...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP SDC through Dublin. By accessing port 6000 of demo-sdc-sdc-fe pod...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP SDC through Dublin. By accessing port 4000 of demo-sdc-sdc-be pod...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP HOLMES before Dublin. By accessing port 9202 of dep-holmes-engine...9.8 Critical
- onap open network automation platformAn issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted...8.8 High
- onap open network automation platformAn issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted...9.8 Critical
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp...7.0 High
- red hat openshiftAn insecure modification vulnerability in the /etc/passwd file was found in the container...7.0 High
- redhat openshift, red hat openshift/installer +1 moreDuring installation of an OpenShift 4 cluster, the `openshift-install` command line tool creates...4.4 Medium
- newlib project newlibThe REENT_CHECK macro (see newlib/libc/include/sys/reent.h) as used by REENT_CHECK_TM,...6.5 Medium
- kde okular, debian linux, fedoraproject fedora +2 moreKDE Okular before 1.10.0 allows code execution via an action link in a PDF document.5.3 Medium
- django-nopassword project django-nopassworddjango-nopassword stores secrets in cleartext7.5 High
- asustor exfat driverAn issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license...8.1 High
- asustor exfat driverAn issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license...7.4 High
- [unknown] pki-core, dogtagpki +1 moreIt was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from...4.6 Medium
apache2Ubuntuapache2 updateNo score- [unknown] pki-core, dogtagpki, redhat enterprise linux +2 moreA Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the...4.7 Medium
- beyondtrust privilege management for windows and macBeyondTrust Privilege Management for Windows and Mac (aka PMWM; formerly Avecto Defendpoint) 5.1...7.5 High
- ibm tivoli netcool/omnibus, tivoli netcool\/omnibus +1 moreIBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an...4.3 Medium
- Show moreLoading…