CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- 3cx live chatThe WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls...9.8 Critical
- ghostServer-side request forgery in Ghost CMS8.1 High
- blamer project blamerCode injection in blamer9.8 Critical
- uppyServer-Side Request Forgery in @uppy/companion9.8 Critical
- fastify fastify-multipartUncontrolled Resource Consumption in fastify-multipart7.5 High
- liferay portalDeserialization of Untrusted Data in Liferay Portal9.8 Critical
- tesla model 3 web interfaceThe driving interface of Tesla Model 3 vehicles in any release before 2020.4.10 allows Denial of...6.5 Medium
- it-novum openitcockpitopenITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self:...7.5 High
- rconfigAn issue was discovered in includes/head.inc.php in rConfig before 3.9.4. An unauthenticated...7.5 High
- xmidt cjwtXmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which...7.5 High
- killernetworking killer control centerAn issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in...7.2 High
- tellabs optical line terminal 1150 firmwareTellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option...9.8 Critical
- killernetworking killer control centerAn issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in...2.7 Low
- killernetworking killer control centerAn issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120404 in...2.7 Low
- hom.ee brain cube coreThe bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to...6.8 Medium
- inextrix astppAn issue was discovered in iNextrix ASTPP before 4.0.1. web_interface/astpp/application/config...7.5 High
- killernetworking killer control centerAn issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120444 in...2.7 Low
- killernetworking killer control centerAn issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in...7.2 High
- huawei hege-560 firmware, hege-570 firmware, osca-550 firmware +3 more +5 moreThere is an improper integrity checking vulnerability on some huawei products. The software of...3.9 Low
- huawei mate 20 firmware, mate 30 pro firmware +1 moreThere is an improper authentication vulnerability in several smartphones. The applock does not...4.6 Medium
- huawei technologies co., ltd. secospace antiddos8000, huawei secospace antiddos8000 firmware +1 moreSome Huawei products have a security vulnerability due to improper authentication. A remote...8.1 High
- huawei mate 20 firmware, mate 30 pro firmware +1 moreThere is an improper authentication vulnerability in several smartphones. The applock does not...4.6 Medium
- huawei mate 20 firmware, mate 30 pro firmware +1 moreThere is an improper authorization vulnerability in several smartphones. The software incorrectly...6.6 Medium
- huawei oxfords-an00a firmwareHuawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions...5.5 Medium
- huawei mate 20 firmware, mate 30 pro firmware +1 moreThere is a logic error vulnerability in several smartphones. The software does not properly...2.4 Low
- huawei campusinsight, manageone +1 moreThere is a double free vulnerability in some Huawei products. A local attacker with low privilege...3.3 Low
- delta electronics industrial automation dopsoft, deltaww delta industrial automation dopsoft +1 moreThe affected insulin pump is designed to communicate using a wireless RF with an Insulet...7.1 High
- [unknown] openshift/mediawiki-apb, redhat openshift +1 moreA vulnerability was found in all openshift/mediawiki-apb 4.x.x versions prior to 4.3.0, where an...7.0 High
- [unknown] pki-core, dogtagpki, redhat certificate system +2 moreA flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where...4.6 Medium
- [unknown] pki-core/pki-kra, dogtagpki, redhat enterprise linux +2 moreA vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)...4.3 Medium
- [unknown] pki-core, dogtagpki, redhat enterprise linux +2 moreA Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where...4.3 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreInappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote...6.5 Medium
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- google chrome, debian linux, fedoraproject fedora +3 more +5 moreUse after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to...8.8 High
- cmsmadesimple cms made simpleThe Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file...7.8 High
- cmsmadesimple cms made simpleThe Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by...5.4 Medium
- centreonOpen redirect via parameter ‘p’ in login.php in Centreon (19.04.4 and below) allows an attacker...6.1 Medium
- centreonLocal File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to...6.5 Medium
- centreonCommand Injection in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to...8.8 High
- linuxfoundation harbor, pivotal vmware harbor registry +1 morePrivilege Escalation in Cloud Native Computing Foundation Harbor8.8 High
- signotec signopad-api\/webAn issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1...6.5 Medium
- atlassian subversion application lifecycle managementSubversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations.6.1 Medium
- signotec signopad-api\/webAn issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1...6.5 Medium
- Show moreLoading…