CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreSQL Injection in Cloud Native Computing Foundation Harbor7.2 High
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreSQL Injection in Cloud Native Computing Foundation Harbor4.9 Medium
- linuxfoundation harbor, pivotal vmware harbor registry +1 moreCross-site Request Forgery (CSRF) in Cloud Native Computing Foundation Harbor8.8 High
- suitecrmSuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and...7.5 High
- salesagility suitecrmSuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 does not correctly implement the ...5.3 Medium
- asus asuswrtAn issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can request ...7.5 High
- asus asuswrtAn issue was discovered in ASUSWRT 3.0.0.4.384.20308. An unauthenticated user can trigger a DoS...7.5 High
- asus asuswrtAn issue was discovered in ASUSWRT 3.0.0.4.384.20308. When processing the /start_apply.htm POST...9.8 Critical
- mozilla bleach, fedoraproject fedora +1 moreBleach vulnerable to mutation XSS via whitelisted math or svg and raw tag6.1 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- [unknown] openshift/mediawiki, redhat openshift +1 moreA vulnerability was found in all openshift/mediawiki 4.x.x versions prior to 4.3.0, where an...7.0 High
- [unknown] openshift/postgresql-apb, redhat openshift +1 moreA vulnerability was found in all openshift/postgresql-apb 4.x.x versions prior to 4.3.0, where an...7.0 High
- torproject tor, opensuse backports, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...7.5 High
- rainloop webmailRainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the...6.1 Medium
- netsas enigma nmsEnigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do...8.8 High
- netsas enigma network management solutionAn OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS...9.8 Critical
- phpbbphpBB arbitrary CSS injection7.5 High
- netsas enigma network management solutionA number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma...6.1 Medium
- netsas enigma network management solutionA CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an...8.8 High
- mediawiki checkuserAn issue was discovered in the CheckUser extension through 1.35.0 for MediaWiki. Oversighted edit...5.3 Medium
- canon oce colorwave 500 firmwareThe web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to...7.5 High
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data rendered within web pages. It...7.5 High
- systech nds-5000 firmware, nds\/5008rm firmware +1 moreSystech Corporation NDS-5000 Terminal Server, NDS/5008 (8 Port, RJ45), firmware Version 02D.30....8.4 High
- mantisbtMantisBT XSS when uploading an attachment6.1 Medium
- canon oce colorwave 500 firmwareThe Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF...8.8 High
- canon oce colorwave 500 firmwareThe web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to...6.1 Medium
- canon oce colorwave 500 firmwareThe web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to...6.1 Medium
- mediawiki mobilefrontendIn the MobileFrontend extension for MediaWiki, XSS exists within the edit summary field of the...6.1 Medium
- canon oce colorwave 500 firmwareThe web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to...6.1 Medium
- netsas enigma network management solutionA number of stored Cross-site Scripting (XSS) vulnerabilities were identified in NETSAS Enigma...6.1 Medium
- igniterealtime openfireIgnite Realtime Openfire allows Cross-site Scripting6.1 Medium
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over HTTP for enforcing access...7.5 High
- igniterealtime openfireIgnite Realtime Openfire allows Cross-site Scripting6.1 Medium
- netsas enigma network management solutionAn unrestricted file upload vulnerability exists in user and system file upload functions in...8.8 High
- netsas enigma network management solutionA remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web...8.8 High
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can...9.6 Critical
- netsas enigma network management solutionNETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database...6.5 Medium
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/ URI.7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the api/method/ URI.7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the user/ URI, as demonstrated by a...7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the project/ URI.7.4 High
- netsas enigma network management solutionA number of files on the NETSAS Enigma NMS server 65.0.0 and prior are granted weak world...8.8 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the contact/ URI.7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the blog/ URI.7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the addresses/ URI.7.4 High
- frappe erpnextERPNext 11.1.47 allows reflected XSS via the PATH_INFO to the address/ URI.7.4 High
- edx open edxOpen edX Ironwood.1 allows support/certificates?user= reflected XSS.6.1 Medium
- onap open network automation platformIn ONAP OOM through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224,...9.8 Critical
- onap open network automation platformIn ONAP DCAE through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224,...9.8 Critical
- onap open network automation platformIn ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270,...9.8 Critical
- Show moreLoading…