Skip to content
OpenAdvisories

Archive

March 2020

Vulnerabilities first published in this month (UTC), newest first.

← February 2020 2020 / March April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • High 7.8
    CVE-2020-1712 Public exploit

    A heap use-after-free vulnerability was found in systemd before version v245-rc1, where asynchronous Polkit queries are…

    [UNKNOWN] systemd systemd systemd Debian Ubuntu
  • High 8.8
    CVE-2020-11113 Public exploit

    jackson-databind mishandles the interaction between serialization gadgets and typing

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 7.5
    CVE-2020-4276 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…

    IBM WebSphere Application Server
  • High 8.6
    CVE-2020-1764 Public exploit

    Hard coded cryptographic key in Kiali

    A hard-coded cryptographic key vulnerability in the default configuration file was found in Kiali, all versions prior to 1.15.1. A remote attacker could abuse this flaw by creating their own JWT signed tokens and bypass Kiali authentication mechanisms, possib…

    Red Hat kiali github.com/kiali/kiali Go
  • High 7.2
    CVE-2020-10963 Public exploit EPSS 15%

    FrozenNode Laravel-Administrator unrestricted file upload

    FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension. NOTE: this product is…

    frozennode/administrator Packagist
  • High 8.1
    CVE-2020-10884 Public exploit EPSS 39%

    This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer…

    TP-Link Archer A7 Network devices
  • High 8.8
    CVE-2020-10882 Public exploit EPSS 41%

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arc…

    TP-Link Archer A7 Network devices
  • High 8.3
    CVE-2020-6650 Public exploit

    Arbitrary code execution through “Update Manager” Class

    UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software …

    Eaton UPS Companion software
  • High 8.8
    CVE-2020-10673 Public exploit

    jackson-databind mishandles the interaction between serialization gadgets and typing

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven
  • High 7.8
    CVE-2020-3950 Exploited Public exploit

    VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for…

    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-5849 Exploited Public exploit EPSS 93%

    Unraid 6.8.0 allows authentication bypass.

    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-0787 Exploited · Ransomware Public exploit EPSS 43%

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improper…

    Microsoft Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation) Windows 10 Version 1903 for ARM64-based Systems Windows
    KEV Jan 28, 2022
  • High 7.8
    CVE-2020-0069 Exploited Public exploit

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient…

    Android
    KEV Nov 3, 2021
  • High 7.8
    CVE-2020-0041 Exploited Public exploit

    In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could…

    linux-hwe linux-riscv linux linux-gke Android Debian Ubuntu
    KEV Nov 3, 2021
  • High 7.2
    CVE-2016-11021 Exploited Public exploit EPSS 70%

    setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in t…

    KEV Mar 25, 2022
  • High 8.8
    CVE-2020-10221 Exploited Public exploit EPSS 77%

    lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands v…

    KEV Nov 3, 2021
  • High 7.6
    CVE-2020-5250 Public exploit

    Possible information disclosure in PrestaShop

    In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all inform…

    PrestaShop PrestaShop Web / CMS
  • High 7.8
    CVE-2019-20500 Exploited Public exploit EPSS 97%

    D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configur…

    KEV Jun 29, 2023
  • High 8.8
    CVE-2019-17026 Exploited Public exploit EPSS 46%

    Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

    Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021