Archive

7 March 2020

Vulnerabilities first published on this day (UTC), newest first.

← February 2020 2020 / March /7 April 2020 →

All Critical High Medium Low Exploited only Public exploit

8 results · Feed

Unscored —

CVE-2020-10220 Public exploit Scanner template EPSS 100%

An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.ph…

Mar 7, 2020
Unscored —

CVE-2020-10214 EPSS 18%

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binar…

Mar 7, 2020
Unscored —

CVE-2020-10215

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands…

Mar 7, 2020
Unscored —

CVE-2020-10216

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands…

Mar 7, 2020
Unscored —

CVE-2020-10213

An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands…

Mar 7, 2020
Unscored —

CVE-2020-8439

Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login p…

Mar 7, 2020
Unscored —

CVE-2020-9470 Public exploit

An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling sessio…

Mar 7, 2020
Medium 6.1

CVE-2020-9281

CKEditor 4.0 vulnerability in the HTML Data Processor

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).

ckeditor ckeditor4 Ubuntu npm

Mar 7, 2020