Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: March 2020

88 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2019-17026
    79This week

    Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.

    HighCVSS 8.8KEVWeaponizedEPSS 46%

    mozilla · firefoxMar 2, 2020

  • FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sq

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    fasterxml · jackson-databindMar 2, 2020

  • FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.antero

    CriticalCVSS 9.8Proof of conceptEPSS 18%

    fasterxml · jackson-databindMar 2, 2020

  • CVE-2020-8437
    34Monitor

    The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attack

    HighCVSS 7.5Proof of conceptEPSS 12%

    bittorrent · utorrentMar 2, 2020

  • CVE-2020-9757
    61This week

    The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacont

    CriticalCVSS 9.8Proof of conceptEPSS 72%

    craftcms · craft cmsMar 4, 2020

  • ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zyxel · nas326 firmwareMar 4, 2020

  • D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionalit

    HighCVSS 7.8WeaponizedEPSS 94%

    dlink · dwl-2600ap firmwareMar 5, 2020

  • D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality i

    HighCVSS 7.8KEVWeaponizedEPSS 96%

    dlink · dwl-2600ap firmwareMar 5, 2020

  • D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in

    HighCVSS 7.8Proof of conceptEPSS 89%

    dlink · dwl-2600ap firmwareMar 5, 2020

  • Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and

    HighCVSS 8.8Proof of conceptEPSS 77%

    comtrend · vr-3033 firmwareMar 5, 2020

  • Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter

    HighCVSS 8.8Proof of conceptEPSS 22%

    djangoproject · djangoMar 5, 2020

  • Directory Traversal with spring-cloud-config-server

    MediumCVSS 6.5Proof of conceptEPSS 68%

    vmware · spring cloud configMar 5, 2020

  • CVE-2020-10188
    61This week

    utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becaus

    CriticalCVSS 9.8No exploitEPSS 74%

    netkit telnet project · netkit telnetMar 6, 2020

  • Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    zohocorp · manageengine desktop centralMar 6, 2020

  • An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.

    HighCVSS 8.8No exploitEPSS 18%

    dlink · dir-825 firmwareMar 6, 2020

  • CVE-2020-10220
    69This week

    An issue was discovered in rConfig through 3.9.4.

    CriticalCVSS 9.8WeaponizedEPSS 99%

    rconfig · rconfigMar 7, 2020

  • lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacte

    HighCVSS 8.8KEVWeaponizedEPSS 77%

    rconfig · rconfigMar 8, 2020

  • CVE-2016-11021
    79This week

    setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand para

    HighCVSS 7.2KEVWeaponizedEPSS 68%

    dlink · dcs-930l firmwareMar 8, 2020

  • Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a refl

    MediumCVSS 6.1Proof of conceptEPSS 75%

    jenkins · audit trailMar 9, 2020

  • In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request t

    CriticalCVSS 9.8No exploitEPSS 10%

    hp · storage essentialsMar 10, 2020

  • A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0).

    MediumCVSS 6.8No exploitEPSS 1%

    siemens · sinvr 3 central control serverMar 10, 2020

  • CVE-2020-0041
    62This week

    In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check.

    HighCVSS 7.8KEVWeaponizedEPSS 3%

    google · androidMar 10, 2020

  • CVE-2020-0069
    61This week

    In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization a

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    google · androidMar 10, 2020

  • SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for

    CriticalCVSS 9.8KEVWeaponizedEPSS 98%

    sap · solution managerMar 10, 2020

  • CVE-2020-10181
    73This week

    goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (admini

    CriticalCVSS 9.8KEVWeaponizedEPSS 14%

    sumavision · enhanced multimedia router firmwareMar 11, 2020

  • An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated

    CriticalCVSS 9.8No exploitEPSS 12%

    zohocorp · manageengine desktop centralMar 11, 2020

  • In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    apache · shardingsphereMar 11, 2020

  • admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading

    HighCVSS 7.2Proof of conceptEPSS 12%

    chadhaajay · phpkbMar 12, 2020

  • CVE-2020-0787
    74This week

    An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l

    HighCVSS 7.8KEVWeaponizedEPSS 42%

    microsoft · windows 10 1507Mar 12, 2020

  • CVE-2020-0816
    38Monitor

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio

    HighCVSS 8.8No exploitEPSS 10%

    microsoft · edgeMar 12, 2020

  • CVE-2020-0825
    34Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · edgeMar 12, 2020

  • CVE-2020-0827
    34Monitor

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin

    HighCVSS 7.5No exploitEPSS 13%

    microsoft · edgeMar 12, 2020

  • CVE-2020-0851
    35Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · officeMar 12, 2020

  • CVE-2020-0852
    35Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · officeMar 12, 2020

  • CVE-2020-0855
    35Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · officeMar 12, 2020

  • A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippet

    CriticalCVSS 9.6No exploitEPSS 10%

    microsoft · application inspectorMar 12, 2020

  • A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    HighCVSS 8.8No exploitEPSS 16%

    microsoft · windows 10Mar 12, 2020

  • A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    HighCVSS 8.8No exploitEPSS 21%

    microsoft · windows 10Mar 12, 2020

  • CVE-2020-0892
    35Monitor

    A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W

    HighCVSS 7.8No exploitEPSS 11%

    microsoft · officeMar 12, 2020

  • CVE-2020-0905
    35Monitor

    An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution V

    HighCVSS 8.0No exploitEPSS 10%

    microsoft · dynamics 365 business centralMar 12, 2020

  • A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque

    CriticalCVSS 10.0KEVWeaponizedEPSS 99%

    microsoft · windows 10 1903Mar 12, 2020

  • Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request.

    CriticalCVSS 9.8No exploitEPSS 10%

    zohocorp · manageengine opmanagerMar 13, 2020

  • An issue was discovered in Responsive Filemanager through 9.14.0.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    tecrail · responsive filemanagerMar 14, 2020

  • Codiad Web IDE through 2.8.4 allows PHP Code injection.

    CriticalCVSS 9.8Proof of conceptEPSS 19%

    codiad · codiadMar 16, 2020

  • CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php t

    CriticalCVSS 9.8Proof of conceptEPSS 15%

    control-webpanel · webpanelMar 16, 2020

  • CVE-2020-6586
    27Monitor

    Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page.

    MediumCVSS 5.4No exploitEPSS 19%

    nagios · nagiosMar 16, 2020

  • CVE-2020-5844
    37Monitor

    index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious P

    HighCVSS 7.2Proof of conceptEPSS 30%

    artica · pandora fmsMar 16, 2020

  • Unraid through 6.8.0 allows Remote Code Execution.

    CriticalCVSS 9.8KEVWeaponizedEPSS 95%

    unraid · unraidMar 16, 2020

  • Unraid 6.8.0 allows authentication bypass.

    HighCVSS 7.5KEVWeaponizedEPSS 93%

    unraid · unraidMar 16, 2020

  • CVE-2020-3950
    63This week

    VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior b

    HighCVSS 7.8KEVWeaponizedEPSS 7%

    vmware · fusionMar 17, 2020

  • CVE-2020-8467
    68This week

    A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to e

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    trendmicro · apex oneMar 17, 2020

  • CVE-2020-8468
    67This week

    Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation esc

    HighCVSS 8.8KEVWeaponizedEPSS 6%

    trendmicro · apex oneMar 17, 2020

  • Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file t

    CriticalCVSS 9.8No exploitEPSS 13%

    trendmicro · apex oneMar 17, 2020

  • CVE-2020-8599
    73This week

    Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary dat

    CriticalCVSS 9.8KEVWeaponizedEPSS 11%

    trendmicro · apex oneMar 17, 2020

  • Cisco SD-WAN Solution vManage SQL Injection Vulnerability

    HighCVSS 8.1No exploitEPSS 54%

    cisco · sd-wan firmwareMar 19, 2020

  • An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to exec

    CriticalCVSS 9.8Proof of conceptEPSS 25%

    netsas · enigma network management solutionMar 19, 2020

  • CVE-2020-9425
    36Monitor

    An issue was discovered in includes/head.inc.php in rConfig before 3.9.4.

    HighCVSS 7.5Proof of conceptEPSS 19%

    rconfig · rconfigMar 20, 2020

  • Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web ser

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    liferay · liferay portalMar 20, 2020

  • CVE-2020-8878
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

    HighCVSS 8.8No exploitEPSS 11%

    foxitsoftware · foxit studio photoMar 20, 2020

  • CVE-2020-8880
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

    HighCVSS 8.8No exploitEPSS 11%

    foxitsoftware · foxit studio photoMar 20, 2020

  • CVE-2020-8881
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

    HighCVSS 8.8No exploitEPSS 11%

    foxitsoftware · foxit studio photoMar 20, 2020

  • CVE-2020-8882
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

    HighCVSS 8.8No exploitEPSS 11%

    foxitsoftware · foxit studio photoMar 20, 2020

  • Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.

    HighCVSS 8.8WeaponizedEPSS 77%

    vestacp · vesta control panelMar 22, 2020

  • Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.

    MediumCVSS 4.8No exploitEPSS 71%

    nagios · nagios xiMar 22, 2020

  • Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.

    MediumCVSS 4.8No exploitEPSS 19%

    nagios · nagios xiMar 22, 2020

  • Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.

    MediumCVSS 4.8No exploitEPSS 71%

    nagios · nagios xiMar 22, 2020

  • The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request.

    CriticalCVSS 9.8KEVWeaponizedEPSS 84%

    grandstream · ucm6200 firmwareMar 23, 2020

  • This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-

    HighCVSS 8.8No exploitEPSS 76%

    dlink · dir-878 firmwareMar 23, 2020

  • This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-

    HighCVSS 8.8No exploitEPSS 80%

    dlink · dir-878 firmwareMar 23, 2020

  • CVE-2020-10879
    64This week

    rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is pas

    CriticalCVSS 9.8Proof of conceptEPSS 83%

    rconfig · rconfigMar 23, 2020

  • Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try

    HighCVSS 7.5No exploitEPSS 28%

    memcached · memcachedMar 24, 2020

  • CVE-2020-9375
    38Monitor

    TP-Link Archer C50 V3 devices before Build 200318 Rel.

    HighCVSS 7.5Proof of conceptEPSS 26%

    tp-link · archer c50Mar 25, 2020

  • Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication

    CriticalCVSS 9.8No exploitEPSS 23%

    apache · shiroMar 25, 2020

  • This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver:

    HighCVSS 8.8WeaponizedEPSS 41%

    tp-link · ac1750 firmwareMar 25, 2020

  • This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750

    HighCVSS 7.8WeaponizedEPSS 5%

    tp-link · ac1750 firmwareMar 25, 2020

  • This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190

    HighCVSS 8.8WeaponizedEPSS 21%

    tp-link · ac1750 firmwareMar 25, 2020

  • FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_imag

    HighCVSS 7.2Proof of conceptEPSS 14%

    frozennode · laravel-administratorMar 25, 2020

  • /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injecti

    CriticalCVSS 9.8No exploitEPSS 39%

    draytek · vigor300b firmwareMar 26, 2020

  • A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve

    CriticalCVSS 9.8No exploitEPSS 20%

    draytek · vigor300b firmwareMar 26, 2020

  • A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve

    CriticalCVSS 9.8No exploitEPSS 20%

    draytek · vigor300b firmwareMar 26, 2020

  • CVE-2020-9467
    28Monitor

    Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.

    MediumCVSS 5.4Proof of conceptEPSS 23%

    piwigo · piwigoMar 26, 2020

  • CVE-2020-8509
    33Monitor

    Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive informat

    HighCVSS 7.5No exploitEPSS 10%

    zohocorp · manageengine desktop centralMar 30, 2020

  • CVE-2020-5723
    60This week

    The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database.

    CriticalCVSS 9.8WeaponizedEPSS 5%

    grandstream · ucm6202 firmwareMar 30, 2020

  • CVE-2020-5724
    60This week

    The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint.

    HighCVSS 7.5WeaponizedEPSS 12%

    grandstream · ucm6202 firmwareMar 30, 2020

  • An issue was discovered in USC iLab cereal through 1.3.0.

    CriticalCVSS 9.8No exploitEPSS 2%

    usc · cerealMar 30, 2020

  • CVE-2020-5284
    30Monitor

    Directory Traversal in Next.js versions below 9.3.2

    MediumCVSS 4.3Proof of conceptEPSS 44%

    zeit · next.jsMar 30, 2020

  • IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary comm

    HighCVSS 8.8No exploitEPSS 66%

    ibm · spectrum protect plusMar 31, 2020

  • CVE-2020-5291
    31Monitor

    Privilege escalation in setuid mode via user namespaces in Bubblewrap

    HighCVSS 7.8No exploitEPSS 0%

    projectatomic · bubblewrapMar 31, 2020