CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- jenkins queue cleanup, jenkins project queue cleanup plugin +1 moreReflected XSS vulnerability in Jenkins Queue cleanup Plugin6.1 Medium
- jenkins azure container service, jenkins project azure container service plugin +1 moreRCE vulnerability in Jenkins Azure Container Service Plugin8.8 High
- jenkins openshift pipeline, jenkins project openshift pipeline plugin +1 moreRCE vulnerability in Jenkins OpenShift Pipeline Plugin8.8 High
- jenkins project pipeline: aws steps plugin, jenkins pipeline\ +1 moreRCE vulnerability in Jenkins Pipeline: AWS Steps Plugin8.8 High
- jenkins project artifactory plugin, jfrog artifactory +1 morePasswords transmitted in plain text by Jenkins Artifactory Plugin7.5 High
- jenkins project artifactory plugin, jfrog artifactory +1 morePasswords stored in plain text by Jenkins Artifactory Plugin6.5 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsImproper Neutralization of Input During Web Page Generation in Jenkins5.4 Medium
- jenkinsCross-Site Request Forgery in Jenkins8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...9.8 Critical
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...9.8 Critical
- apache shiro, debian linux +1 moreImproper Authentication in Apache Shiro9.8 Critical
- tribalgroup sits\An authentication bypass vulnerability is present in the standalone SITS:Vision 9.7.0 component...8.1 High
- tp-link archer c50TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a...7.5 High
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 uses the 1fea123e07f730f76e661bced33a94152378611e API key rather than...9.1 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 has a web-based terminal that allows attackers to execute arbitrary OS...9.8 Critical
- it-novum openitcockpitopenITCOCKPIT before 3.7.3 has unnecessary files (such as Lodash files) under the web root, which...5.4 Medium
- it-novum openitcockpitapp/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3...6.5 Medium
- keijiban tsumiki project tsumiki, mash room - free cgi - keijiban tsumiki +1 moreKeijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified...9.8 Critical
- wl-enq project wl-enqWL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the...9.8 Critical
- wl-enq project wl-enqCross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject...6.1 Medium
- cutephp cutenewsCuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via...8.8 High
- cutephp cutenewsCross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary...6.1 Medium
- ekakin shihonkanri plus goout, shihonkanri plus goout project plus goout +1 moreShihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS...9.8 Critical
- ekakin shihonkanri plus goout, shihonkanri plus goout project plus goout +1 moreShihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of...9.1 Critical
- ekakin shihonkanri plus goout, shihonkanri plus goout project plus goout +1 moreDirectory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote...9.1 Critical
- keitai-site.net mailformmailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors.9.8 Critical
- keitai-site.net mailformCross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject...6.1 Medium
- simplesamlphp saml2Missing Token Replay Detection8.2 High
- druva insyncImproper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +1 more +3 moreIn the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an...5.3 Medium
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource allocation handling of...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable code execution vulnerability exists in the label-parsing functionality of...9.8 Critical
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the resource record-parsing...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the message-parsing functionality of...7.5 High
- videolabs libmicrodns, debian linux +1 moreAn exploitable denial-of-service vulnerability exists in the message-parsing functionality of...7.5 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted...7.5 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an...9.8 Critical
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the...9.8 Critical
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded...7.5 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak...7.5 High
- moxa eds-510e firmware, eds-g516e firmware +1 moreIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes...9.8 Critical
- zend zendtolib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when...9.8 Critical
- zend zendtoZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user...8.8 High
- Show moreLoading…