Archive

2 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /2 April 2020 →

All Critical High Medium Low Exploited only Public exploit

58 results · Feed

Unscored —

CVE-2018-17058

An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerabili…

Mar 2, 2020
Unscored —

CVE-2020-5539

GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote a…

GRANDIT GRANDIT

Mar 2, 2020
Unscored —

CVE-2020-9549

In PDFResurrect 0.12 through 0.19, get_type in pdf.c has an out-of-bounds write via a crafted PDF document.

pdfresurrect pdfresurrect Debian Ubuntu

Mar 2, 2020
Unscored —

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an…

Mozilla Firefox mozjs38 mozjs52 Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6792

When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. Th…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6801

Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corr…

Mozilla Firefox firefox Browsers Ubuntu

Mar 2, 2020
Unscored —

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on…

Mozilla Firefox Thunderbird firefox-esr Browsers Alpine

Mar 2, 2020
Unscored —

CVE-2020-6794

If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these pass…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6798

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6795

When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null poi…

Mozilla Thunderbird thunderbird thunderbird Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6800

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6799

Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported fi…

Mozilla Firefox firefox-esr Browsers Alpine

Mar 2, 2020
High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2020-9546

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2020-9547 Public exploit Scanner template EPSS 18%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

jackson-databind com.fasterxml.jackson.core:jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2020-9548 Public exploit Scanner template EPSS 19%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Unscored —

CVE-2020-9545

Pale Moon 28.x before 28.8.4 has a segmentation fault related to module scripting, as demonstrated by a Lacoste web sit…

Mar 2, 2020