CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- telegramThe Telegram application through 5.12 for Android, when Show Popup is enabled, might allow...6.1 Medium
- pyyaml, fedoraproject fedora, opensuse leap +1 more +3 moreImproper Input Validation in PyYAML9.8 Critical
- bumpalo project bumpaloOut of bounds read in bumpalo7.5 High
- keycloakExposure of Sensitive Information in keycloak5.6 Medium
- arm mbed tls, mbed crypto, debian linux +1 more +3 moreArm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)...5.9 Medium
- red hat ansible, debian linux, fedoraproject fedora +2 more +4 moreCode Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible7.9 High
- pyup safetyMalicious package may avoid detection in python auditing5.0 Medium
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- zebra fx9500 firmwareMotorola FX9500 devices allow remote attackers to conduct absolute path traversal attacks, as...7.5 High
- rconfigrConfig before 3.9.5 allows injection because lib/crud/search.crud.php does not properly...9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- apache traffic server, debian linux +1 moreThere is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8...9.8 Critical
- motorola fx9500-41324d41-us firmware, fx9500-41324d41-ww firmware, fx9500-81324d41-us firmware +1 more +3 moreMotorola FX9500 devices allows remote attackers to read database files.7.5 High
- bec technologies multiple routers, dlink dir-867 firmware, dir-878 firmware +1 more +3 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- bec technologies multiple routers, dlink dir-867 firmware, dir-878 firmware +1 more +3 moreThis vulnerability allows network-adjacent attackers to bypass authentication on affected...8.8 High
- elog electronic logbookThis vulnerability allows remote attackers to create a denial-of-service condition on affected...5.3 Medium
- rockwellautomation factorytalk services platformIn Rockwell Automation all versions of FactoryTalk Diagnostics software, a subsystem of the...9.8 Critical
- quest foglight evolveThis vulnerability allows remote attackers to execute arbitrary code on affected installations of...9.8 Critical
- horde groupware, groupware webmail edition, debian linux +1 more +3 moreThis vulnerability allows remote attackers to create arbitrary files on affected installations of...4.3 Medium
- horde groupware, groupware webmail edition, debian linux +2 moreThis vulnerability allows remote attackers to execute local PHP files on affected installations...6.3 Medium
- auto-maskin dcu 210e firmware, marine pro observer, rp 210e firmware +2 moreIn Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer...7.5 High
- openwrt luci** DISPUTED ** In OpenWrt LuCI git-20.x, remote unauthenticated attackers can retrieve the list...5.3 Medium
- auto-maskin dcu 210 firmware, marine pro observer, rp210e firmware +2 moreIn Auto-Maskin RP210E Versions 3.7 and prior, DCU210E Versions 3.7 and prior and Marine Observer...9.1 Critical
- grandstream ucm6200, ucm6200 firmware +1 moreThe HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote...9.8 Critical
- schneider-electric andover continuum 5720 firmware, andover continuum 5740 firmware, andover continuum 9200 firmware +8 more +10 moreA CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in...9.8 Critical
- schneider-electric andover continuum 5720 firmware, andover continuum 5740 firmware, andover continuum 9200 firmware +8 more +10 moreA CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...6.1 Medium
- schneider-electric andover continuum 5720 firmware, andover continuum 5740 firmware, andover continuum 9200 firmware +8 more +10 moreA CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...6.1 Medium
- schneider-electric interactive graphical scada systemA CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14...7.8 High
- schneider-electric interactive graphical scada systemA CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14...7.5 High
- schneider-electric 140cpu65150 firmware, 140cpu65160 firmware, 140cpu65160s firmware +25 more +27 moreA CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum...7.5 High
- zim-wiki zimZim through 0.72.1 creates temporary directories with predictable names. A malicious user could...5.5 Medium
- schneider-electric ulti zigbee installation toolkitA CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit (Versions prior...7.8 High
- schneider-electric ecostruxure control expert, unity pro, modicon m340 firmware +1 more +3 moreA CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component (...9.8 Critical
- schneider-electric pmepxm0100 prosoft configuratorA CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002...7.8 High
- parallels desktopThis vulnerability allows local attackers to disclose information on affected installations of...6.5 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.8 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.5 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- parallels desktopThis vulnerability allows local attackers to disclose sensitive information on affected...6.0 Medium
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...8.2 High
- rbsoft autoupdater.netAutoUpdater.NET allows XXE9.8 Critical
- supsystic pricing table by supsysticAn issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress....7.3 High
- honda hr-v 2017 firmwareThe remote keyless system on Honda HR-V 2017 vehicles sends the same RF signal for each door-open...6.5 Medium
- zohocorp manageengine assetexplorerZoho ManageEngine Asset Explorer 6.5 does not validate the System Center Configuration Manager ...7.2 High
- zohocorp manageengine assetexplorerAn issue was discovered in Zoho ManageEngine AssetExplorer 6.5. During an upgrade of the Windows...6.4 Medium
- mikrotik routerosThe SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU...7.5 High
- weechat, debian linux +1 moreAn issue was discovered in WeeChat before 2.7.1 (0.3.4 to 2.7 are affected). When a new IRC...9.8 Critical
- lg weboswebOS TV Emulator privilege escalation vulnerability4.6 Medium
texlive-filesystemopenSUSESecurity update for texlive-filesystemNo score- artica pandora fmsIn Artica Pandora FMS through 7.42, Web Admin users can execute arbitrary code by uploading a ...7.2 High
- Show moreLoading…