CVEs published in March 2020
1,760 vulnerabilities, 318 critical, 19 exploited.
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the CTI...7.5 High
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP...5.9 Medium
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreThe Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP...7.5 High
- grandstream ucm6202 firmware, ucm6204 firmware, ucm6208 firmware +2 moreThe UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database....9.8 Critical
- apache netbeans, oracle graalvm +1 moreImproper Verification of Cryptographic Signature in Apache Netbeans7.5 High
- apache netbeans, oracle graalvm +1 moreImproper Certificate Validation in Apache Netbeans9.1 Critical
- mongodb bsonDeserialization of Untrusted Data in bson9.8 Critical
- gradle plugin publishingExposure of Sensitive Information in Gradle publish plugin6.5 Medium
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central allows unauthenticated users to access PDFGenerationServlet,...7.5 High
- weberpIn webERP 4.15, the Import Bank Transactions function fails to sanitize the content of imported...8.8 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +24 more +26 moreLinux kernel bpf verifier vulnerability7.8 High
- opensource-socialnetwork open source social networkAn issue was discovered in Open Source Social Network (OSSN) through 5.3. A user-controlled file...5.9 Medium
- mitsubishi electric corporation melsoft transmission port (udp/ip) of multiple mitsubishi electric melsec series, mitsubishielectric cr800-q firmware, fx3g firmware +44 more +46 moreWhen MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions),...7.5 High
- toyota display control unit, toyota motor corporation dcu (display control unit) +1 moreToyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within...8.8 High
operaopenSUSESecurity update for operaNo score- phoenixcontact portico server 16 client, portico server 1 client, portico server 4 client +2 moreLocal Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when...7.8 High
- phoenixcontact pc worx srtInsecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local...7.8 High
- gstreamer, gstreamer project gst-rtsp-server, opensuse backports sle +1 more +3 moreAn exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of...7.5 High
- gitlabGitLab EE/CE 8.11 through 12.9.1 allows blocked users to pull/push docker images.6.5 Medium
- gitlabIn GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.7.5 High
- gitlabGitLab through 12.9 is affected by a potential DoS in repository archive download.7.5 High
- gitlab, debian linux +1 moreGitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that...6.5 Medium
- gitlabGitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.9.8 Critical
- custom searchable data entry system project searchable data entry systemThe custom-searchable-data-entry-system (aka Custom Searchable Data Entry System) plugin through...8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM...7.5 High
- f5 nginx controller, netapp cloud backup +1 moreIn NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to...8.6 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache...7.5 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1...7.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file.7.5 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1...8.1 High
- kubernetes, fedoraproject fedora +1 moreKubernetes API server denial of service5.3 Medium
- kubernetes, fedoraproject fedora +1 moreKubernetes kubelet denial of service4.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1,...7.5 High
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A...8.8 High
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory...7.8 High
- lenovo solution centerMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...7.8 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A...7.5 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race...7.0 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...7.8 High
- lenovo system updateMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local...7.8 High
- lenovo b50-10 firmware, edge 15 firmware, flex 2 pro-15 firmware +24 more +26 moreMITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A buffer...9.8 Critical
- totemo totemomailAn insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated...5.4 Medium
- advantech webaccessIn Advantech WebAccess, Versions 8.4.2 and prior. A stack-based buffer overflow vulnerability...8.8 High
- otrs, otrs ag ((otrs)) community edition +1 moreSession / Password / Password token leak7.3 High
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation Disclosure6.5 Medium
- otrs, otrs ag ((otrs)) community edition +1 morePossible XSS in Customer user address book4.6 Medium
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreInformation disclosure in support bundle files2.4 Low
- otrs, otrs ag ((otrs)) community edition, opensuse backports sle +1 more +3 moreAutocomplete in the form login screens3.5 Low
- bitvec project bitvecUse after free and double free in bitvec9.8 Critical
- sun ehrdSunnet eHRD - Broken Access Control8.1 High
- Show moreLoading…