Skip to content
OpenAdvisories

Archive

March 2020

Vulnerabilities first published in this month (UTC), newest first.

← February 2020 2020 / March April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-5722 Exploited Public exploit EPSS 84%

    The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via craft…

    KEV Jan 28, 2022
  • Critical 9.8
    CVE-2020-7961 Exploited Public exploit EPSS 100%

    Deserialization of Untrusted Data in Liferay Portal

    Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web services (JSONWS).

    com.liferay.portal:com.liferay.portal.kernel Maven
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-3950 Exploited Public exploit

    VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-5849 Exploited Public exploit EPSS 93%

    Unraid 6.8.0 allows authentication bypass.

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-5847 Exploited Public exploit EPSS 96%

    Unraid through 6.8.0 allows Remote Code Execution.

    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2020-0796 Exploited · Ransomware Public exploit EPSS 100%

    A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol …

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Feb 10, 2022
  • High 7.8
    CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Jan 28, 2022
  • Critical 10.0
    CVE-2020-6207 Exploited Public exploit EPSS 98%

    SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform a…

    SAP_SE SAP Solution Manager (User Experience Monitoring)
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-0069 Exploited Public exploit

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient…

    Android
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-0041 Exploited Public exploit

    In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could…

    linux-hwe linux-riscv linux linux-gke Android Debian Ubuntu
    KEV Nov 3, 2021
  • High 7.2
    CVE-2016-11021 Exploited Public exploit EPSS 70%

    setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in t…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2020-10221 Exploited Public exploit EPSS 77%

    lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands v…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-10189 Exploited Public exploit EPSS 100%

    Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted …

    KEV Nov 3, 2021
  • High 7.8
    CVE-2019-20500 Exploited Public exploit EPSS 97%

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configur…

    KEV Jun 29, 2023
  • Critical 9.8
    CVE-2020-9054 Exploited Public exploit EPSS 100%

    ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

    Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS de…

    Zyxel NSA325v2 NSA210 NSA221 Network devices
    KEV Mar 25, 2022
  • High 8.8
    CVE-2019-17026 Exploited Public exploit EPSS 46%

    Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021