CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- rails actionview, debian linux, fedoraproject fedora +1 more +3 morePossible XSS vulnerability in ActionView4.0 Medium
- dlink dsl-2875al firmware, dsl-2877al firmware +1 moreD-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via...7.5 High
- dlink dsl-2875al firmwareD-Link DSL-2875AL devices through 1.00.05 are prone to password disclosure via a simple crafted ...7.5 High
- comba ac2400 firmwareComba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via a simple...7.5 High
- comba ap2600-i - a02 - 0202n00pd2 firmwareComba AP2600-I devices through A02,0202N00PD2 are prone to password disclosure via an insecure...7.5 High
- hancom office neoThe tfo_common component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via...7.8 High
- hancom office neoThe hncbd90 component in Hancom Office 9.6.1.9403 allows a use-after-free via an unknown object...7.8 High
- easybuild project easybuild, easybuilders easybuild-framework +1 moreGitHub personal access token leaking into temporary EasyBuild (debug) logs7.7 High
- ivanti workspace controlAn issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's...9.8 Critical
- zohocorp manageengine remote access plusZoho ManageEngine Remote Access Plus 10.0.258 does not validate user permissions properly,...8.8 High
- fortinet fortibalancer 1000 firmware, fortibalancer 2000 firmware, fortibalancer 3000 firmware +1 more +3 moreIn FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has...8.8 High
- fortinet fortibalancer 1000 firmware, fortibalancer 2000 firmware, fortibalancer 3000 firmware +1 more +3 moreIn FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has...8.8 High
- cisco vmanage software, sd-wan firmware +1 moreCisco SD-WAN Solution vManage Stored Cross-Site Scripting Vulnerability5.5 Medium
- cisco vmanage software, sd-wan firmware +1 moreCisco SD-WAN Solution vManage SQL Injection Vulnerability5.4 Medium
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Buffer Overflow Vulnerability7.1 High
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Privilege Escalation Vulnerability7.0 High
- cisco sd-wan solution, sd-wan firmware +1 moreCisco SD-WAN Solution Command Injection Vulnerability7.8 High
- fortinet fortibalancer 1000 firmware, fortibalancer 2000 firmware, fortibalancer 3000 firmware +1 more +3 moreIn FortiBalancer 400, 1000, 2000 and 3000, a platform-specific remote access vulnerability has...8.8 High
- red hat openshift/template-service-broker-operator, redhat template service broker operator +1 moreA vulnerability was found in openshift/template-service-broker-operator in all 4.x.x versions...7.0 High
- newlib project newlibIn the __lshift function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc...6.5 Medium
- newlib project newlibIn the __multiply function of the newlib libc library, all versions prior to 3.3.0 (see newlib...6.5 Medium
- newlib project newlibIn the __i2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc...6.5 Medium
- newlib project newlibIn the __d2b function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc...6.5 Medium
- newlib project newlibIn the __mdiff function of the newlib libc library, all versions prior to 3.3.0 (see newlib/libc...6.5 Medium
- newlib project newlibIn the __multadd function of the newlib libc library, prior to versions 3.3.0 (see newlib/libc...6.5 Medium
- apache deltaspikeInjection in DeltaSpike6.1 Medium
- octopus deployIn Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to...8.8 High
- ilch cmsilchCMS 2.1.23 allows XSS via the index.php/partner/index Link parameter.6.1 Medium
- ilch cmsilchCMS 2.1.23 allows XSS via the index.php/partner/index Name parameter.6.1 Medium
- igniterealtime openfireIgnite Realtime Openfire allows Cross-site Scripting6.1 Medium
- ilch cmsilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.6.1 Medium
- onap open network automation platformIn ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224,...9.8 Critical
- onap open network automation platformIn ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224,...9.8 Critical
- onap open network automation platformIn ONAP SO through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224,...9.8 Critical
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could allow an authenticated user to bypass...5.0 Medium
- ibm datapower gatewayIBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive...4.9 Medium
- denx u-boot, opensuse leap, siemens ruggedcom rox mx5000 +10 more +12 moreDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently...7.8 High
- jsonparser project jsonparser, fedoraproject fedora +1 moreInfinite Loop in jsonparser7.5 High
- ovirt ovirt-engine, redhat virtualization +1 moreA cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization...5.4 Medium
- newlib project newlibThe _dtoa_r function of the newlib libc library, prior to version 3.3.0, performs multiple memory...6.5 Medium
- hyperHTTP Request Smuggling in hyper9.8 Critical
- cbox project cboxNULL Pointer Dereference in cbox9.8 Critical
- redhat libvirt, debian linux, fedoraproject fedora +2 moreqemu/qemu_driver.c in libvirt before 6.0.0 mishandles the holding of a monitor job during a query...5.7 Medium
twistedDebiantwisted - regression updateNo score- otrsAn issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.11, and Community...5.4 Medium
- arxes-tolinaarxes-tolina 3.0.0 allows User Enumeration.4.3 Medium
- arxes-tolinaA CSV injection in arxes-tolina 3.0.0 allows malicious users to gain remote control of other...9.6 Critical
- perlspeak project perlspeakPerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use...9.8 Critical
- logicaldocLogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available...6.5 Medium
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typing8.8 High
- Show moreLoading…