By publication date
Exploited and new serious CVEs: March 2020
88 records · 20 KEV. In publication order.
Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.
Month boundaries are UTC, the same rule as the publication date on each record page.
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
79This week | CVE-2019-17026Weaponized | Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.mozilla · firefox · CWE-843 | High8.8 | KEV | 46.3% | Mar 2, 2020 |
45Plan | CVE-2020-9547Proof of concept | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqfasterxml · jackson-databind · CWE-502 | Critical9.8 | — | 18.3% | Mar 2, 2020 |
45Plan | CVE-2020-9548Proof of concept | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anterofasterxml · jackson-databind · CWE-502 | Critical9.8 | — | 18.9% | Mar 2, 2020 |
34Monitor | CVE-2020-8437Proof of concept | The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attackbittorrent · utorrent · CWE-476 | High7.5 | — | 12.0% | Mar 2, 2020 |
61This week | CVE-2020-9757Proof of concept | The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontcraftcms · craft cms · CWE-74 | Critical9.8 | — | 72.8% | Mar 4, 2020 |
99Now | CVE-2020-9054Weaponized | ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgizyxel · nas326 firmware · CWE-78 | Critical9.8 | KEV | 99.9% | Mar 4, 2020 |
59Plan | CVE-2019-20499Weaponized | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionalitdlink · dwl-2600ap firmware · CWE-78 | High7.8 | — | 94.8% | Mar 5, 2020 |
90Now | CVE-2019-20500Weaponized | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality idlink · dwl-2600ap firmware · CWE-78 | High7.8 | KEV | 96.7% | Mar 5, 2020 |
58Plan | CVE-2019-20501Proof of concept | D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in dlink · dwl-2600ap firmware · CWE-78 | High7.8 | — | 89.7% | Mar 5, 2020 |
58Plan | CVE-2020-10173Proof of concept | Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and comtrend · vr-3033 firmware · CWE-78 | High8.8 | — | 77.1% | Mar 5, 2020 |
42Plan | CVE-2020-9402Proof of concept | Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter djangoproject · django · CWE-89 | High8.8 | — | 22.5% | Mar 5, 2020 |
47Plan | CVE-2020-5405Proof of concept | Directory Traversal with spring-cloud-config-servervmware · spring cloud config · CWE-23 | Medium6.5 | — | 68.5% | Mar 5, 2020 |
61This week | CVE-2020-10188No exploit | utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becausnetkit telnet project · netkit telnet · CWE-120 | Critical9.8 | — | 74.3% | Mar 6, 2020 |
99Now | CVE-2020-10189Weaponized | Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImagezohocorp · manageengine desktop central · CWE-502 | Critical9.8 | KEV | 99.9% | Mar 6, 2020 |
40Plan | CVE-2020-10214No exploit | An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.dlink · dir-825 firmware · CWE-787 | High8.8 | — | 18.3% | Mar 6, 2020 |
69This week | CVE-2020-10220Weaponized | An issue was discovered in rConfig through 3.9.4.rconfig · rconfig · CWE-89 | Critical9.8 | — | 99.6% | Mar 7, 2020 |
88Now | CVE-2020-10221Weaponized | lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacterconfig · rconfig · CWE-78 | High8.8 | KEV | 77.1% | Mar 8, 2020 |
79This week | CVE-2016-11021Weaponized | setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand paradlink · dcs-930l firmware · CWE-78 | High7.2 | KEV | 68.8% | Mar 8, 2020 |
47Plan | CVE-2020-2140Proof of concept | Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a refljenkins · audit trail · CWE-79 | Medium6.1 | — | 75.9% | Mar 9, 2020 |
42Plan | CVE-2017-10992No exploit | In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request thp · storage essentials · CWE-502 | Critical9.8 | — | 10.4% | Mar 10, 2020 |
28Monitor | CVE-2019-19296No exploit | A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0).siemens · sinvr 3 central control server · CWE-22 | Medium6.8 | — | 1.8% | Mar 10, 2020 |
62This week | CVE-2020-0041Weaponized | In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check.google · android · CWE-20 | High7.8 | KEV | 3.1% | Mar 10, 2020 |
61This week | CVE-2020-0069Weaponized | In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization agoogle · android · CWE-787 | High7.8 | KEV | 1.3% | Mar 10, 2020 |
98Now | CVE-2020-6207Weaponized | SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication forsap · solution manager · CWE-306 | Critical9.8 | KEV | 98.1% | Mar 10, 2020 |
73This week | CVE-2020-10181Weaponized | goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (adminisumavision · enhanced multimedia router firmware · CWE-352 | Critical9.8 | KEV | 14.6% | Mar 11, 2020 |
43Plan | CVE-2020-8540No exploit | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated zohocorp · manageengine desktop central · CWE-611 | Critical9.8 | — | 12.7% | Mar 11, 2020 |
49Plan | CVE-2020-1947Proof of concept | In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputsapache · shardingsphere · CWE-502 | Critical9.8 | — | 33.9% | Mar 11, 2020 |
32Monitor | CVE-2020-10386Proof of concept | admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading chadhaajay · phpkb · CWE-434 | High7.2 | — | 12.3% | Mar 12, 2020 |
74This week | CVE-2020-0787Weaponized | An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic lmicrosoft · windows 10 1507 · CWE-59 | High7.8 | KEV | 42.5% | Mar 12, 2020 |
38Monitor | CVE-2020-0816No exploit | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptiomicrosoft · edge · CWE-787 | High8.8 | — | 10.6% | Mar 12, 2020 |
34Monitor | CVE-2020-0825No exploit | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Enginmicrosoft · edge · CWE-787 | High7.5 | — | 13.3% | Mar 12, 2020 |
34Monitor | CVE-2020-0827No exploit | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Enginmicrosoft · edge · CWE-787 | High7.5 | — | 13.3% | Mar 12, 2020 |
35Monitor | CVE-2020-0851No exploit | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Wmicrosoft · office | High7.8 | — | 11.8% | Mar 12, 2020 |
35Monitor | CVE-2020-0852No exploit | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Wmicrosoft · office | High7.8 | — | 11.9% | Mar 12, 2020 |
35Monitor | CVE-2020-0855No exploit | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Wmicrosoft · office | High7.8 | — | 11.8% | Mar 12, 2020 |
41Plan | CVE-2020-0872No exploit | A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippetmicrosoft · application inspector · CWE-79 | Critical9.6 | — | 10.0% | Mar 12, 2020 |
40Plan | CVE-2020-0881No exploit | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka microsoft · windows 10 | High8.8 | — | 16.7% | Mar 12, 2020 |
42Plan | CVE-2020-0883No exploit | A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka microsoft · windows 10 | High8.8 | — | 21.9% | Mar 12, 2020 |
35Monitor | CVE-2020-0892No exploit | A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Wmicrosoft · office | High7.8 | — | 11.8% | Mar 12, 2020 |
35Monitor | CVE-2020-0905No exploit | An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vmicrosoft · dynamics 365 business central | High8.0 | — | 10.8% | Mar 12, 2020 |
100Now | CVE-2020-0796Weaponized | A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requemicrosoft · windows 10 1903 · CWE-119 | Critical10.0 | KEV | 99.8% | Mar 12, 2020 |
42Plan | CVE-2020-10541No exploit | Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request.zohocorp · manageengine opmanager | Critical9.8 | — | 10.0% | Mar 13, 2020 |
45Plan | CVE-2020-10567Proof of concept | An issue was discovered in Responsive Filemanager through 9.14.0.tecrail · responsive filemanager · CWE-20 | Critical9.8 | — | 19.6% | Mar 14, 2020 |
45Plan | CVE-2019-19208Proof of concept | Codiad Web IDE through 2.8.4 allows PHP Code injection.codiad · codiad · CWE-94 | Critical9.8 | — | 19.2% | Mar 16, 2020 |
44Plan | CVE-2020-10230Proof of concept | CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php tcontrol-webpanel · webpanel · CWE-89 | Critical9.8 | — | 15.7% | Mar 16, 2020 |
27Monitor | CVE-2020-6586No exploit | Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page.nagios · nagios · CWE-79 | Medium5.4 | — | 19.0% | Mar 16, 2020 |
37Monitor | CVE-2020-5844Proof of concept | index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious Partica · pandora fms · CWE-434 | High7.2 | — | 30.2% | Mar 16, 2020 |
98Now | CVE-2020-5847Weaponized | Unraid through 6.8.0 allows Remote Code Execution.unraid · unraid | Critical9.8 | KEV | 95.8% | Mar 16, 2020 |
88Now | CVE-2020-5849Weaponized | Unraid 6.8.0 allows authentication bypass.unraid · unraid · CWE-697 | High7.5 | KEV | 93.2% | Mar 16, 2020 |
63This week | CVE-2020-3950Weaponized | VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior bvmware · fusion · CWE-269 | High7.8 | KEV | 7.2% | Mar 17, 2020 |
68This week | CVE-2020-8467Weaponized | A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to etrendmicro · apex one | High8.8 | KEV | 10.9% | Mar 17, 2020 |
67This week | CVE-2020-8468Weaponized | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation esctrendmicro · apex one · CWE-74 | High8.8 | KEV | 6.1% | Mar 17, 2020 |
43Plan | CVE-2020-8598No exploit | Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file ttrendmicro · apex one · CWE-306 | Critical9.8 | — | 13.2% | Mar 17, 2020 |
73This week | CVE-2020-8599Weaponized | Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary dattrendmicro · apex one | Critical9.8 | KEV | 11.8% | Mar 17, 2020 |
48Plan | CVE-2019-16012No exploit | Cisco SD-WAN Solution vManage SQL Injection Vulnerabilitycisco · sd-wan firmware · CWE-77 | High8.1 | — | 54.2% | Mar 19, 2020 |
47Plan | CVE-2019-16072Proof of concept | An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to execnetsas · enigma network management solution · CWE-78 | Critical9.8 | — | 25.8% | Mar 19, 2020 |
36Monitor | CVE-2020-9425Proof of concept | An issue was discovered in includes/head.inc.php in rConfig before 3.9.4.rconfig · rconfig · CWE-670 | High7.5 | — | 19.0% | Mar 20, 2020 |
99Now | CVE-2020-7961Weaponized | Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web serliferay · liferay portal · CWE-502 | Critical9.8 | KEV | 99.9% | Mar 20, 2020 |
38Monitor | CVE-2020-8878No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.foxitsoftware · foxit studio photo · CWE-787 | High8.8 | — | 11.0% | Mar 20, 2020 |
38Monitor | CVE-2020-8880No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.foxitsoftware · foxit studio photo · CWE-125 | High8.8 | — | 11.0% | Mar 20, 2020 |
38Monitor | CVE-2020-8881No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.foxitsoftware · foxit studio photo · CWE-416 | High8.8 | — | 11.0% | Mar 20, 2020 |
38Monitor | CVE-2020-8882No exploit | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.foxitsoftware · foxit studio photo · CWE-824 | High8.8 | — | 11.0% | Mar 20, 2020 |
58Plan | CVE-2020-10808Weaponized | Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.vestacp · vesta control panel · CWE-78 | High8.8 | — | 77.5% | Mar 22, 2020 |
40Plan | CVE-2020-10819No exploit | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.nagios · nagios xi · CWE-79 | Medium4.8 | — | 71.3% | Mar 22, 2020 |
25Monitor | CVE-2020-10820No exploit | Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.nagios · nagios xi · CWE-79 | Medium4.8 | — | 19.1% | Mar 22, 2020 |
40Plan | CVE-2020-10821No exploit | Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.nagios · nagios xi · CWE-79 | Medium4.8 | — | 71.1% | Mar 22, 2020 |
94Now | CVE-2020-5722Weaponized | The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request.grandstream · ucm6200 firmware · CWE-89 | Critical9.8 | KEV | 84.4% | Mar 23, 2020 |
58Plan | CVE-2020-8863No exploit | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-dlink · dir-878 firmware · CWE-303 | High8.8 | — | 76.7% | Mar 23, 2020 |
59Plan | CVE-2020-8864No exploit | This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-dlink · dir-878 firmware · CWE-697 | High8.8 | — | 80.2% | Mar 23, 2020 |
64This week | CVE-2020-10879Proof of concept | rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is pasrconfig · rconfig · CWE-78 | Critical9.8 | — | 83.8% | Mar 23, 2020 |
38Monitor | CVE-2020-10931No exploit | Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to trymemcached · memcached · CWE-120 | High7.5 | — | 28.1% | Mar 24, 2020 |
38Monitor | CVE-2020-9375Proof of concept | TP-Link Archer C50 V3 devices before Build 200318 Rel.tp-link · archer c50 · CWE-772 | High7.5 | — | 26.6% | Mar 25, 2020 |
46Plan | CVE-2020-1957No exploit | Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication apache · shiro | Critical9.8 | — | 23.3% | Mar 25, 2020 |
47Plan | CVE-2020-10882Weaponized | This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: tp-link · ac1750 firmware · CWE-78 | High8.8 | — | 41.3% | Mar 25, 2020 |
40Plan | CVE-2020-10883Weaponized | This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 tp-link · ac1750 firmware · CWE-732 | High7.8 | — | 5.2% | Mar 25, 2020 |
42Plan | CVE-2020-10884Weaponized | This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190tp-link · ac1750 firmware · CWE-321 | High8.8 | — | 21.9% | Mar 25, 2020 |
32Monitor | CVE-2020-10963Proof of concept | FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_imagfrozennode · laravel-administrator · CWE-434 | High7.2 | — | 14.6% | Mar 25, 2020 |
51Plan | CVE-2020-10826No exploit | /cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injectidraytek · vigor300b firmware · CWE-77 | Critical9.8 | — | 39.3% | Mar 26, 2020 |
45Plan | CVE-2020-10827No exploit | A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achievedraytek · vigor300b firmware · CWE-787 | Critical9.8 | — | 20.8% | Mar 26, 2020 |
45Plan | CVE-2020-10828No exploit | A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achievedraytek · vigor300b firmware · CWE-787 | Critical9.8 | — | 20.8% | Mar 26, 2020 |
28Monitor | CVE-2020-9467Proof of concept | Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.piwigo · piwigo · CWE-79 | Medium5.4 | — | 23.8% | Mar 26, 2020 |
33Monitor | CVE-2020-8509No exploit | Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive informatzohocorp · manageengine desktop central · CWE-306 | High7.5 | — | 10.6% | Mar 30, 2020 |
60This week | CVE-2020-5723Weaponized | The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database.grandstream · ucm6202 firmware · CWE-312 | Critical9.8 | — | 5.8% | Mar 30, 2020 |
60This week | CVE-2020-5724Weaponized | The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint.grandstream · ucm6202 firmware · CWE-89 | High7.5 | — | 12.1% | Mar 30, 2020 |
40Plan | CVE-2020-11105No exploit | An issue was discovered in USC iLab cereal through 1.3.0.usc · cereal · CWE-763 | Critical9.8 | — | 2.0% | Mar 30, 2020 |
30Monitor | CVE-2020-5284Proof of concept | Directory Traversal in Next.js versions below 9.3.2zeit · next.js · CWE-23 | Medium4.3 | — | 44.7% | Mar 30, 2020 |
55Plan | CVE-2020-4241No exploit | IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commibm · spectrum protect plus · CWE-78 | High8.8 | — | 66.2% | Mar 31, 2020 |
31Monitor | CVE-2020-5291No exploit | Privilege escalation in setuid mode via user namespaces in Bubblewrapprojectatomic · bubblewrap · CWE-648 | High7.8 | — | 0.9% | Mar 31, 2020 |
- CVE-2019-1702679This week
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.
HighCVSS 8.8KEVWeaponizedEPSS 46%mozilla · firefoxMar 2, 2020
- CVE-2020-954745Plan
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sq
CriticalCVSS 9.8Proof of conceptEPSS 18%fasterxml · jackson-databindMar 2, 2020
- CVE-2020-954845Plan
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.antero
CriticalCVSS 9.8Proof of conceptEPSS 18%fasterxml · jackson-databindMar 2, 2020
- CVE-2020-843734Monitor
The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attack
HighCVSS 7.5Proof of conceptEPSS 12%bittorrent · utorrentMar 2, 2020
- CVE-2020-975761This week
The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacont
CriticalCVSS 9.8Proof of conceptEPSS 72%craftcms · craft cmsMar 4, 2020
- CVE-2020-905499Now
ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CriticalCVSS 9.8KEVWeaponizedEPSS 99%zyxel · nas326 firmwareMar 4, 2020
- CVE-2019-2049959Plan
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionalit
HighCVSS 7.8WeaponizedEPSS 94%dlink · dwl-2600ap firmwareMar 5, 2020
- CVE-2019-2050090Now
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality i
HighCVSS 7.8KEVWeaponizedEPSS 96%dlink · dwl-2600ap firmwareMar 5, 2020
- CVE-2019-2050158Plan
D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in
HighCVSS 7.8Proof of conceptEPSS 89%dlink · dwl-2600ap firmwareMar 5, 2020
- CVE-2020-1017358Plan
Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and
HighCVSS 8.8Proof of conceptEPSS 77%comtrend · vr-3033 firmwareMar 5, 2020
- CVE-2020-940242Plan
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter
HighCVSS 8.8Proof of conceptEPSS 22%djangoproject · djangoMar 5, 2020
- CVE-2020-540547Plan
Directory Traversal with spring-cloud-config-server
MediumCVSS 6.5Proof of conceptEPSS 68%vmware · spring cloud configMar 5, 2020
- CVE-2020-1018861This week
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becaus
CriticalCVSS 9.8No exploitEPSS 74%netkit telnet project · netkit telnetMar 6, 2020
- CVE-2020-1018999Now
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage
CriticalCVSS 9.8KEVWeaponizedEPSS 99%zohocorp · manageengine desktop centralMar 6, 2020
- CVE-2020-1021440Plan
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices.
HighCVSS 8.8No exploitEPSS 18%dlink · dir-825 firmwareMar 6, 2020
- CVE-2020-1022069This week
An issue was discovered in rConfig through 3.9.4.
CriticalCVSS 9.8WeaponizedEPSS 99%rconfig · rconfigMar 7, 2020
- CVE-2020-1022188Now
lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacte
HighCVSS 8.8KEVWeaponizedEPSS 77%rconfig · rconfigMar 8, 2020
- CVE-2016-1102179This week
setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand para
HighCVSS 7.2KEVWeaponizedEPSS 68%dlink · dcs-930l firmwareMar 8, 2020
- CVE-2020-214047Plan
Jenkins Audit Trail Plugin 3.2 and earlier does not escape the error message for the URL Patterns field form validation, resulting in a refl
MediumCVSS 6.1Proof of conceptEPSS 75%jenkins · audit trailMar 9, 2020
- CVE-2017-1099242Plan
In HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request t
CriticalCVSS 9.8No exploitEPSS 10%hp · storage essentialsMar 10, 2020
- CVE-2019-1929628Monitor
A vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0).
MediumCVSS 6.8No exploitEPSS 1%siemens · sinvr 3 central control serverMar 10, 2020
- CVE-2020-004162This week
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check.
HighCVSS 7.8KEVWeaponizedEPSS 3%google · androidMar 10, 2020
- CVE-2020-006961This week
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization a
HighCVSS 7.8KEVWeaponizedEPSS 1%google · androidMar 10, 2020
- CVE-2020-620798Now
SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing Authentication Check does not perform any authentication for
CriticalCVSS 9.8KEVWeaponizedEPSS 98%sap · solution managerMar 10, 2020
- CVE-2020-1018173This week
goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (admini
CriticalCVSS 9.8KEVWeaponizedEPSS 14%sumavision · enhanced multimedia router firmwareMar 11, 2020
- CVE-2020-854043Plan
An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated
CriticalCVSS 9.8No exploitEPSS 12%zohocorp · manageengine desktop centralMar 11, 2020
- CVE-2020-194749Plan
In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs
CriticalCVSS 9.8Proof of conceptEPSS 33%apache · shardingsphereMar 11, 2020
- CVE-2020-1038632Monitor
admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading
HighCVSS 7.2Proof of conceptEPSS 12%chadhaajay · phpkbMar 12, 2020
- CVE-2020-078774This week
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l
HighCVSS 7.8KEVWeaponizedEPSS 42%microsoft · windows 10 1507Mar 12, 2020
- CVE-2020-081638Monitor
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio
HighCVSS 8.8No exploitEPSS 10%microsoft · edgeMar 12, 2020
- CVE-2020-082534Monitor
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin
HighCVSS 7.5No exploitEPSS 13%microsoft · edgeMar 12, 2020
- CVE-2020-082734Monitor
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engin
HighCVSS 7.5No exploitEPSS 13%microsoft · edgeMar 12, 2020
- CVE-2020-085135Monitor
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W
HighCVSS 7.8No exploitEPSS 11%microsoft · officeMar 12, 2020
- CVE-2020-085235Monitor
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W
HighCVSS 7.8No exploitEPSS 11%microsoft · officeMar 12, 2020
- CVE-2020-085535Monitor
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W
HighCVSS 7.8No exploitEPSS 11%microsoft · officeMar 12, 2020
- CVE-2020-087241Plan
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippet
CriticalCVSS 9.6No exploitEPSS 10%microsoft · application inspectorMar 12, 2020
- CVE-2020-088140Plan
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka
HighCVSS 8.8No exploitEPSS 16%microsoft · windows 10Mar 12, 2020
- CVE-2020-088342Plan
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka
HighCVSS 8.8No exploitEPSS 21%microsoft · windows 10Mar 12, 2020
- CVE-2020-089235Monitor
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft W
HighCVSS 7.8No exploitEPSS 11%microsoft · officeMar 12, 2020
- CVE-2020-090535Monitor
An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution V
HighCVSS 8.0No exploitEPSS 10%microsoft · dynamics 365 business centralMar 12, 2020
- CVE-2020-0796100Now
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain reque
CriticalCVSS 10.0KEVWeaponizedEPSS 99%microsoft · windows 10 1903Mar 12, 2020
- CVE-2020-1054142Plan
Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request.
CriticalCVSS 9.8No exploitEPSS 10%zohocorp · manageengine opmanagerMar 13, 2020
- CVE-2020-1056745Plan
An issue was discovered in Responsive Filemanager through 9.14.0.
CriticalCVSS 9.8Proof of conceptEPSS 19%tecrail · responsive filemanagerMar 14, 2020
- CVE-2019-1920845Plan
Codiad Web IDE through 2.8.4 allows PHP Code injection.
CriticalCVSS 9.8Proof of conceptEPSS 19%codiad · codiadMar 16, 2020
- CVE-2020-1023044Plan
CentOS-WebPanel.com (aka CWP) CentOS Web Panel (for CentOS 6 and 7) allows SQL Injection via the /cwp_{SESSION_HASH}/admin/loader_ajax.php t
CriticalCVSS 9.8Proof of conceptEPSS 15%control-webpanel · webpanelMar 16, 2020
- CVE-2020-658627Monitor
Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page.
MediumCVSS 5.4No exploitEPSS 19%nagios · nagiosMar 16, 2020
- CVE-2020-584437Monitor
index.php?sec=godmode/extensions&sec2=extensions/files_repo in Pandora FMS v7.0 NG allows authenticated administrators to upload malicious P
HighCVSS 7.2Proof of conceptEPSS 30%artica · pandora fmsMar 16, 2020
- CVE-2020-584798Now
Unraid through 6.8.0 allows Remote Code Execution.
CriticalCVSS 9.8KEVWeaponizedEPSS 95%unraid · unraidMar 16, 2020
- CVE-2020-584988Now
Unraid 6.8.0 allows authentication bypass.
HighCVSS 7.5KEVWeaponizedEPSS 93%unraid · unraidMar 16, 2020
- CVE-2020-395063This week
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior b
HighCVSS 7.8KEVWeaponizedEPSS 7%vmware · fusionMar 17, 2020
- CVE-2020-846768This week
A migration tool component of Trend Micro Apex One (2019) and OfficeScan XG contains a vulnerability which could allow remote attackers to e
HighCVSS 8.8KEVWeaponizedEPSS 10%trendmicro · apex oneMar 17, 2020
- CVE-2020-846867This week
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) agents are affected by a content validation esc
HighCVSS 8.8KEVWeaponizedEPSS 6%trendmicro · apex oneMar 17, 2020
- CVE-2020-859843Plan
Trend Micro Apex One (2019), OfficeScan XG and Worry-Free Business Security (9.0, 9.5, 10.0) server contains a vulnerable service DLL file t
CriticalCVSS 9.8No exploitEPSS 13%trendmicro · apex oneMar 17, 2020
- CVE-2020-859973This week
Trend Micro Apex One (2019) and OfficeScan XG server contain a vulnerable EXE file that could allow a remote attacker to write arbitrary dat
CriticalCVSS 9.8KEVWeaponizedEPSS 11%trendmicro · apex oneMar 17, 2020
- CVE-2019-1601248Plan
Cisco SD-WAN Solution vManage SQL Injection Vulnerability
HighCVSS 8.1No exploitEPSS 54%cisco · sd-wan firmwareMar 19, 2020
- CVE-2019-1607247Plan
An OS command injection vulnerability in the discover_and_manage CGI script in NETSAS Enigma NMS 65.0.0 and prior allows an attacker to exec
CriticalCVSS 9.8Proof of conceptEPSS 25%netsas · enigma network management solutionMar 19, 2020
- CVE-2020-942536Monitor
An issue was discovered in includes/head.inc.php in rConfig before 3.9.4.
HighCVSS 7.5Proof of conceptEPSS 19%rconfig · rconfigMar 20, 2020
- CVE-2020-796199Now
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via JSON web ser
CriticalCVSS 9.8KEVWeaponizedEPSS 99%liferay · liferay portalMar 20, 2020
- CVE-2020-887838Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.
HighCVSS 8.8No exploitEPSS 11%foxitsoftware · foxit studio photoMar 20, 2020
- CVE-2020-888038Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.
HighCVSS 8.8No exploitEPSS 11%foxitsoftware · foxit studio photoMar 20, 2020
- CVE-2020-888138Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.
HighCVSS 8.8No exploitEPSS 11%foxitsoftware · foxit studio photoMar 20, 2020
- CVE-2020-888238Monitor
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.
HighCVSS 8.8No exploitEPSS 11%foxitsoftware · foxit studio photoMar 20, 2020
- CVE-2020-1080858Plan
Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.
HighCVSS 8.8WeaponizedEPSS 77%vestacp · vesta control panelMar 22, 2020
- CVE-2020-1081940Plan
Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.
MediumCVSS 4.8No exploitEPSS 71%nagios · nagios xiMar 22, 2020
- CVE-2020-1082025Monitor
Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.
MediumCVSS 4.8No exploitEPSS 19%nagios · nagios xiMar 22, 2020
- CVE-2020-1082140Plan
Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.
MediumCVSS 4.8No exploitEPSS 71%nagios · nagios xiMar 22, 2020
- CVE-2020-572294Now
The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request.
CriticalCVSS 9.8KEVWeaponizedEPSS 84%grandstream · ucm6200 firmwareMar 23, 2020
- CVE-2020-886358Plan
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-
HighCVSS 8.8No exploitEPSS 76%dlink · dir-878 firmwareMar 23, 2020
- CVE-2020-886459Plan
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-
HighCVSS 8.8No exploitEPSS 80%dlink · dir-878 firmwareMar 23, 2020
- CVE-2020-1087964This week
rConfig before 3.9.5 allows command injection by sending a crafted GET request to lib/crud/search.crud.php since the nodeId parameter is pas
CriticalCVSS 9.8Proof of conceptEPSS 83%rconfig · rconfigMar 23, 2020
- CVE-2020-1093138Monitor
Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try
HighCVSS 7.5No exploitEPSS 28%memcached · memcachedMar 24, 2020
- CVE-2020-937538Monitor
TP-Link Archer C50 V3 devices before Build 200318 Rel.
HighCVSS 7.5Proof of conceptEPSS 26%tp-link · archer c50Mar 25, 2020
- CVE-2020-195746Plan
Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication
CriticalCVSS 9.8No exploitEPSS 23%apache · shiroMar 25, 2020
- CVE-2020-1088247Plan
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver:
HighCVSS 8.8WeaponizedEPSS 41%tp-link · ac1750 firmwareMar 25, 2020
- CVE-2020-1088340Plan
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750
HighCVSS 7.8WeaponizedEPSS 5%tp-link · ac1750 firmwareMar 25, 2020
- CVE-2020-1088442Plan
This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190
HighCVSS 8.8WeaponizedEPSS 21%tp-link · ac1750 firmwareMar 25, 2020
- CVE-2020-1096332Monitor
FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_imag
HighCVSS 7.2Proof of conceptEPSS 14%frozennode · laravel-administratorMar 25, 2020
- CVE-2020-1082651Plan
/cgi-bin/activate.cgi on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve command injecti
CriticalCVSS 9.8No exploitEPSS 39%draytek · vigor300b firmwareMar 26, 2020
- CVE-2020-1082745Plan
A stack-based buffer overflow in apmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve
CriticalCVSS 9.8No exploitEPSS 20%draytek · vigor300b firmwareMar 26, 2020
- CVE-2020-1082845Plan
A stack-based buffer overflow in cvmd on Draytek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1 allows remote attackers to achieve
CriticalCVSS 9.8No exploitEPSS 20%draytek · vigor300b firmwareMar 26, 2020
- CVE-2020-946728Monitor
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.
MediumCVSS 5.4Proof of conceptEPSS 23%piwigo · piwigoMar 26, 2020
- CVE-2020-850933Monitor
Zoho ManageEngine Desktop Central before 10.0.483 allows unauthenticated users to access PDFGenerationServlet, leading to sensitive informat
HighCVSS 7.5No exploitEPSS 10%zohocorp · manageengine desktop centralMar 30, 2020
- CVE-2020-572360This week
The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database.
CriticalCVSS 9.8WeaponizedEPSS 5%grandstream · ucm6202 firmwareMar 30, 2020
- CVE-2020-572460This week
The Grandstream UCM6200 series before 1.0.20.22 is vulnerable to an SQL injection via the HTTP server's websockify endpoint.
HighCVSS 7.5WeaponizedEPSS 12%grandstream · ucm6202 firmwareMar 30, 2020
- CVE-2020-1110540Plan
An issue was discovered in USC iLab cereal through 1.3.0.
CriticalCVSS 9.8No exploitEPSS 2%usc · cerealMar 30, 2020
- CVE-2020-528430Monitor
Directory Traversal in Next.js versions below 9.3.2
MediumCVSS 4.3Proof of conceptEPSS 44%zeit · next.jsMar 30, 2020
- CVE-2020-424155Plan
IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary comm
HighCVSS 8.8No exploitEPSS 66%ibm · spectrum protect plusMar 31, 2020
- CVE-2020-529131Monitor
Privilege escalation in setuid mode via user namespaces in Bubblewrap
HighCVSS 7.8No exploitEPSS 0%projectatomic · bubblewrapMar 31, 2020