CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- sun ehrdSunnet eHRD - Cross-Site Scripting6.1 Medium
- sun ehrdSunnet eHRD - Sensitive Data Exposure7.5 High
- unisoon ultralog express, ultralog express firmware +1 moreUnisoon UltraLog Express - SQL Injection10.0 Critical
- unisoon ultralog express, ultralog express firmware +1 moreUnisoon UltraLog Express - Sensitive Data Exposure8.6 High
- unisoon ultralog express, ultralog express firmware +1 moreUnisoon UltraLog Express - Broken Authentication8.1 High
- accenture mercuryAn XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core...9.8 Critical
- mulesoft aplkitWithdrawn Advisory: Improper Restriction of XML External Entity Reference in Mulesoft APIkit9.8 Critical
- azkaban project azkabanAzkaban through 3.84.0 allows XXE, related to validator/XmlValidatorManager.java and user...9.8 Critical
- osmandOsmand through 2.0.0 allow XXE because of binary/BinaryMapIndexReader.java.9.1 Critical
- piwigoThe Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in...4.3 Medium
- piwigoPiwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg...5.4 Medium
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 more/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi while base64 decoding ticket parameter on...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi through ticket parameter on Draytek...9.8 Critical
- draytek vigor2960 firmware, vigor300b firmware, vigor3900 firmware +2 moreA stack-based buffer overflow in /cgi-bin/activate.cgi through var parameter on Draytek Vigor3900...9.8 Critical
- huawei taurus-al00b, taurus-al00b firmware +1 moreHuawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use...5.5 Medium
- huawei p30, p30 firmware +1 moreHUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access...7.8 High
- huawei oxfordp-an10b firmwareHuawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an...7.8 High
- microfocus service manager automation, micro focus international focus - service manager automation (sma) +1 moreAn SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA),...8.8 High
- puppet continuous deliveryIn Continuous Delivery for Puppet Enterprise (CD4PE) before 3.4.0, changes to resources or...7.7 High
- codesysAn exploitable memory corruption vulnerability exists in the Name Service Client functionality of...7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege...7.5 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typing8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typing8.8 High
- moxa mds-g516e firmwareIn Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting...6.5 Medium
- google closure-library, closure library +1 moreAuth Bypass in Google's Closure-Library6.5 Medium
- google dart sdk, dart software development kit +1 moreXSS in Dart5.4 Medium
- kiali, redhat openshift service mesh +1 moreHard coded cryptographic key in Kiali8.6 High
- mcafee application and change control, mcafee, llc mcafee application and change control (macc) +1 moreMACC installer DLL side loading7.3 High
- codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 moreCODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer...9.8 Critical
- sonicwall sma1000, sma1000 firmware +1 moreA vulnerability in the SonicWall SMA1000 HTTP Extraweb server allows an unauthenticated remote...7.5 High
- teradici pcoip management consoleTeradici PCoIP Management Console 20.01.0 and 19.11.1 is vulnerable to unauthenticated password...8.1 High
- hestiacp control panelIn the Password Reset Module in VESTA Control Panel through 0.9.8-25 and Hestia Control Panel...6.5 Medium
- s9y serendipitySerendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the...9.8 Critical
- frozennode laravel-administratorFrozenNode Laravel-Administrator unrestricted file upload7.2 High
- dell rsa authentication managerRSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting...4.8 Medium
- dell rsa authentication managerRSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting...4.8 Medium
- microfocus vibe, micro focus international focus vibe. +1 moreA stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior...5.4 Medium
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...8.8 High
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...7.5 High
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop versions Photoshop CC 2019, and Photoshop 2020 have an out-of-bounds read...4.3 Medium
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...9.8 Critical
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...4.3 Medium
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...8.8 High
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...8.8 High
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...9.8 Critical
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...4.3 Medium
- adobe photoshop, photoshop 2020, photoshop cc +2 moreAdobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier...8.8 High
- Show moreLoading…