CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- artica pandora fmsArtica Pandora FMS through 7.42 is vulnerable to remote PHP code execution because of an...7.2 High
- artica pandora fmsIn Artica Pandora FMS through 7.42, an unauthenticated attacker can read the chat history. The...5.3 Medium
- ibm jazz for service managementIBM Jazz for Service Management 3.13 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- netgear prosafe wc7520 firmware, prosafe wc7600 firmware, prosafe wc9500 firmware +2 moreNETGEAR Prosafe WC9500 5.1.0.17, WC7600 5.1.0.17, and WC7520 2.5.0.35 devices allow a remote...7.2 High
- codeigniterCodeIgniter Improper Privilege Management8.8 High
- netgear gs728tps firmwareOn NETGEAR GS728TPS devices through 5.3.0.35, a remote attacker having network connectivity to...2.7 Low
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache Tika5.5 Medium
- eaton ups companion software, ups companion +1 moreArbitrary code execution through “Update Manager” Class8.3 High
- wago pfc200 firmwareAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...7.0 High
- wago pfc200 firmwareAn exploitable double free vulnerability exists in the iocheckd service "I/O-Check" functionality...7.8 High
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreUncontrolled Resource Consumption in Apache Tika5.5 Medium
- wago pfc200 firmwareAn exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ...7.0 High
- zohocorp manageengine desktop centralManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop Central 10 allows HTML injection on...6.1 Medium
- hashicorp vaultHashiCorp Vault Improper Privilege Management9.1 Critical
- hashicorp vaultHashiCorp Vault Improper Privilege Management5.3 Medium
- torproject tor, opensuse backports sle, leap +2 moreTor before 0.3.5.10, 0.4.x before 0.4.1.9, and 0.4.2.x before 0.4.2.7 allows remote attackers to...7.5 High
- naver cloud explorerNaver Cloud Explorer before 2.2.2.11 allows the attacker can move a local file in any path on the...9.8 Critical
- articatech artica proxyArtica Proxy 4.26 allows remote command execution for an authenticated user via shell...7.2 High
- nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.4.8 Medium
- nagios xiNagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.4.8 Medium
- nagios xiNagios XI 5.6.11 allows XSS via the account/main.php theme parameter.4.8 Medium
- hdfgroup hdf5An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the...5.5 Medium
- hdfgroup hdf5An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function...5.5 Medium
- hdfgroup hdf5An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the...5.5 Medium
- hdfgroup hdf5An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function...5.5 Medium
- vestacp vesta control panelVesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup...8.8 High
- mitre calderaauth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a...5.3 Medium
- ez publish-kernel, publish-legacy +1 moreeZ Publish Kernel and Legacy Unrestricted Upload of File with Dangerous Type9.8 Critical
- phpmyadmin, fedoraproject fedora, opensuse backports sle +2 more +4 morephpMyAdmin SQL Injection8.0 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 moreInsufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an...5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerability5.4 Medium
- phpmyadmin, debian linux, fedoraproject fedora +3 more +5 morephpMyAdmin SQL injection vulnerability8.0 High
- lix project lixMachine-In-The-Middle in lix8.1 High
- dlink dap-1650 firmwareAn issue was discovered on D-Link DAP-1650 devices before 1.04B02_J65H Hot Fix. Attackers can...9.8 Critical
- bloq univalueUniValue::read() in UniValue before 1.0.5 allow attackers to cause a denial of service (the class...7.5 High
- swann dvr-16cif firmware, dvr04b firmware, dvr08b firmware +1 more +3 moreOn Swann DVR04B, DVR08B, DVR-16CIF, and DVR16B devices, raysharpdvr application has a vulnerable...9.8 Critical
- svglib project svglibSVGlib Vulnerable to XXE Attacks9.8 Critical
- simplemachines simple machine forumAn issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF...9.8 Critical
- quantumcloud simple link directoryAn XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before...6.1 Medium
- mediawiki abusefilterAn issue was discovered in the AbuseFilter extension for MediaWiki. includes/special...7.5 High
- sparkdevnetwork rock rmsRock RMS before 1.8.6 mishandles vCard access control within the People/GetVCard/REST controller.9.8 Critical
- squid-cache squid, canonical ubuntu linux, debian linux +1 more +3 moreSquid before 4.9, when certain web browsers are used, mishandles HTML in the host (aka hostname)...6.1 Medium
- zimbra zm-mailboxcs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox before 8.8.15.p8 allows...6.5 Medium
- linbit csync2An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects...9.8 Critical
- nextcloud desktopA code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when...6.7 Medium
- hackerone nextcloud server, nextcloud server, fedoraproject fedora +2 moreA missing access control check in Nextcloud Server < 18.0.1, < 17.0.4, and < 16.0.9 causes hide...6.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14...6.5 Medium
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to disclose sensitive information on affected...3.3 Low
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- foxit studio photo, foxitsoftware foxit studio photo +1 moreThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...7.8 High
- Show moreLoading…