Archive

March 2020

Vulnerabilities first published in this month (UTC), newest first.

← February 2020 2020 / March April 2020 →

All Critical High Medium Low Exploited only Public exploit

85 results · Clear filters · Feed

Unscored —

CVE-2020-8777 Public exploit

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo,…

Mar 2, 2020
Unscored —

CVE-2020-8776 Public exploit

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a…

Mar 2, 2020
High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021
Critical 9.8

CVE-2020-9547 Public exploit Scanner template EPSS 18%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020
Critical 9.8

CVE-2020-9548 Public exploit Scanner template EPSS 19%

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Mar 2, 2020