Skip to content
OpenAdvisories

Archive

March 2020

Vulnerabilities first published in this month (UTC), newest first.

← February 2020 2020 / March April 2020 →
  1. 13
  2. 258
  3. 314
  4. 442
  5. 589
  6. 626
  7. 78
  8. 87
  9. 968
  10. 10144
  11. 1145
  12. 12299
  13. 1375
  14. 1412
  15. 1526
  16. 1689
  17. 1731
  18. 1872
  19. 1978
  20. 2078
  21. 215
  22. 2214
  23. 2362
  24. 24175
  25. 25110
  26. 2630
  27. 2739
  28. 28 
  29. 29 
  30. 3034
  31. 3129
All Critical High Medium Low Exploited only Public exploit

1,762 results · Feed

  • Unscored —
    CVE-2020-3789

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupt…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3773

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3781

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3772

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors …

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3785

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupt…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3784

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupt…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3780

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors …

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3783

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a heap corruptio…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3787

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupt…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3782

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds…

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3770

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors …

    Adobe Adobe Photoshop
  • Unscored —
    CVE-2020-3786

    Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corrupt…

    Adobe Adobe Photoshop
  • Medium 5.9
    CVE-2020-10888

    This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firm…

    TP-Link Systems Archer A7 Network devices
  • High 8.1
    CVE-2020-10887

    This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 …

    TP-Link Systems Archer A7 Network devices
  • High 8.1
    CVE-2020-10885

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…

    TP-Link Systems Archer A7 Network devices
  • High 8.1
    CVE-2020-10886

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…

    TP-Link Systems Archer A7 Network devices
  • Medium 5.3
    CVE-2020-10883 Public exploit

    This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmwar…

    TP-Link Systems Archer A7 Network devices
  • High 8.1
    CVE-2020-10884 Public exploit EPSS 39%

    This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer…

    TP-Link Systems Archer A7 Network devices
  • Critical 9.8
    CVE-2020-10881

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Fir…

    TP-Link Systems Archer A7 Network devices
  • High 8.8
    CVE-2020-10882 Public exploit EPSS 41%

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Arc…

    TP-Link Systems Archer A7 Network devices
  • Unscored —
    CVE-2020-3808

    Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition…

    Adobe Creative Cloud Desktop Application
  • Unscored —
    CVE-2020-3794

    ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation c…

    Adobe ColdFusion
  • Unscored —
    CVE-2020-3761

    ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation…

    Adobe ColdFusion
  • Unscored —
    CVE-2020-9552

    Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbit…

    Adobe Adobe Bridge
  • Unscored —
    CVE-2020-9551

    Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary c…

    Adobe Adobe Bridge
  • Unscored —
    CVE-2020-3769

    Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful e…

    Adobe Adobe Experience Manager
  • Medium 4.1
    CVE-2020-5277

    Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch

    PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0

    PrestaShop ps_facetedsearch
  • High 7.2
    CVE-2020-5282

    arbitrary shell execution in Nick Chan Bot

    In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,which can compromise the bot This is patched in version 1.0.0-beta

    Nick Chan nickchanbot
  • Unscored —
    DRUPAL-CONTRIB-2020-008

    SVG Image module allows to upload SVG files. The module did not sufficiently protect against malicious code inside SVG …

    drupal/svg_image Packagist
  • Medium 6.2
    CVE-2020-5281

    LDAP connector injection in Perun

    In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sanitisation of the input.

    CESNET perun
  • High 7.6
    CVE-2020-5280

    Local file inclusion vulnerability in http4s

    http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.FileService, org.http4s.server.staticcontent.ResourceService and org.http4s.server.staticc…

    http4s http4s org.http4s:http4s-server_2.12 Maven
  • Unscored —
    CVE-2020-3766 Public exploit

    Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Succe…

    Adobe Adobe Genuine Integrity Service
  • Unscored —
    CVE-2020-3803

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3807

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3804

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3806

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3802

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3805

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3801

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader
  • Unscored —
    CVE-2020-3800

    Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2…

    Adobe Adobe Acrobat and Reader