CVE List - 2020 / March
Showing 1701 - 1754 of 1754 CVEs for March 2020 (Page 18 of 18)
| CVE ID | Date | Title |
|---|---|---|
| CVE-2020-5723 | 2020-03-30 | The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords... |
| CVE-2020-5724 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an... |
| CVE-2020-5725 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an... |
| CVE-2020-5726 | 2020-03-30 | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an... |
| CVE-2020-5255 | 2020-03-30 | Prevent cache poisoning via a Response Content-Type header |
| CVE-2020-5274 | 2020-03-30 | Exceptions displayed in non-debug configurations in Symfony |
| CVE-2016-11024 | 2020-03-30 | odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is... |
| CVE-2016-11023 | 2020-03-30 | odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE: this product is... |
| CVE-2020-5275 | 2020-03-30 | Firewall configured with unanimous strategy was not actually unanimous in symfony/security-http |
| CVE-2020-5284 | 2020-03-30 | Directory Traversal in Next.js versions below 9.3.2 |
| CVE-2019-9507 | 2020-03-30 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution |
| CVE-2019-9508 | 2020-03-30 | Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting |
| CVE-2019-9509 | 2020-03-30 | The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting |
| CVE-2020-9055 | 2020-03-30 | Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript |
| CVE-2019-20634 | 2020-03-30 | An issue was discovered in Proofpoint Email Protection through 2019-09-08.... |
| CVE-2020-10374 | 2020-03-30 | A webserver component in Paessler PRTG Network Monitor 19.2.50 to... |
| CVE-2020-5289 | 2020-03-30 | Read permissions not enforced for client provided filter expressions in Elide http client |
| CVE-2019-19913 | 2020-03-30 | In Intland codeBeamer ALM 9.5 and earlier, there is stored... |
| CVE-2019-19912 | 2020-03-30 | In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting... |
| CVE-2020-11105 | 2020-03-30 | An issue was discovered in USC iLab cereal through 1.3.0.... |
| CVE-2020-11104 | 2020-03-30 | An issue was discovered in USC iLab cereal through 1.3.0.... |
| CVE-2019-19606 | 2020-03-30 | X-Plane before 11.41 has multiple improper path validations that could... |
| CVE-2019-19605 | 2020-03-30 | X-Plane before 11.41 allows Arbitrary Memory Write via crafted network... |
| CVE-2020-11106 | 2020-03-30 | An issue was discovered in Responsive Filemanager through 9.14.0. In... |
| CVE-2020-7611 | 2020-03-30 | All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from... |
| CVE-2020-11113 | 2020-03-31 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization... |
| CVE-2020-11112 | 2020-03-31 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization... |
| CVE-2020-11111 | 2020-03-31 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization... |
| CVE-2020-11414 | 2020-03-31 | An issue was discovered in Progress Telerik UI for Silverlight... |
| CVE-2020-10595 | 2020-03-31 | pam-krb5 before 4.9 has a buffer overflow that might cause... |
| CVE-2019-2391 | 2020-03-31 | JS-bson may incorrectly serialise some requests |
| CVE-2020-6008 | 2020-03-31 | LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary... |
| CVE-2020-4206 | 2020-03-31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a... |
| CVE-2020-4208 | 2020-03-31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials,... |
| CVE-2020-4214 | 2020-03-31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a... |
| CVE-2020-4235 | 2020-03-31 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to... |
| CVE-2020-4236 | 2020-03-31 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an... |
| CVE-2020-4237 | 2020-03-31 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to... |
| CVE-2020-4238 | 2020-03-31 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to... |
| CVE-2020-4239 | 2020-03-31 | IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a... |
| CVE-2020-4240 | 2020-03-31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a... |
| CVE-2020-4241 | 2020-03-31 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through... |
| CVE-2020-4242 | 2020-03-31 | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through... |
| CVE-2019-14880 | 2020-03-31 | A vulnerability was found in Moodle versions 3.7 before 3.7.3,... |
| CVE-2019-14905 | 2020-03-31 | A vulnerability was found in Ansible Engine versions 2.9.x before... |
| CVE-2019-10180 | 2020-03-31 | A vulnerability was found in all pki-core 10.x.x version, where... |
| CVE-2020-1712 | 2020-03-31 | A heap use-after-free vulnerability was found in systemd before version... |
| CVE-2020-11441 | 2020-03-31 | phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs... |
| CVE-2019-13495 | 2020-03-31 | In firmware version 4.50 of Zyxel XGS2210-52HP, multiple stored cross-site... |
| CVE-2020-5291 | 2020-03-31 | Privilege escalation in setuid mode via user namespaces in Bubblewrap |
| CVE-2020-5292 | 2020-03-31 | Time-based blind injection in Leantime |
| CVE-2020-7009 | 2020-03-31 | Elasticsearch versions from 6.7.0 before 6.8.8 and 7.0.0 before 7.6.2... |
| CVE-2020-10696 | 2020-03-31 | A path traversal flaw was found in Buildah in versions... |
| CVE-2020-5344 | 2020-03-31 | Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65,... |