CVEs published March 3, 2020
14 CVEs were published on March 3, 2020: 0 critical, 3 high.
- Published
- 14
- Critical
- 0
- High
- 3
- Medium
- 5
- Low
- 1
- Unrated
- 5
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Facebook HHVM
- 3
- IBM Tivoli Netcool/OMNIbus
- 3
- Pivotal Reactor Netty · io.projectreactor.netty:reactor-net…
- 2
- SUSE Linux Enterprise High Performance Computing 15-ESPO… +7
- 2
- Naver Cloud Explorer
- 1
- Red Hat Ansible · ansible
- 1
High 3
- CVE-2020-1734A flaw was found in the pipe lookup plugin of ansible.Red Hat Ansible · ansible
- CVE-2019-3696pcp: Local privilege escalation from user pcp to root through migrate_tempdirsSUSE Linux Enterprise High Performance Computing 15-ESPO… +7
- CVE-2019-3695pcp: Local privilege escalation from user pcp to rootSUSE Linux Enterprise High Performance Computing 15-ESPO… +7
Medium, low and unrated 11
- CVE-2020-5403DoS Via Malformed URL with Reactor Netty HTTP ServerPivotal Reactor Netty · io.projectreactor.netty:reactor-net…
- CVE-2020-5404Authentication Leak On Redirect With Reactor Netty HttpClientPivotal Reactor Netty · io.projectreactor.netty:reactor-net…
- CVE-2020-1892Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to informatioFacebook HHVM
- CVE-2020-1893Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS.Facebook HHVM
- CVE-2020-1888Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS.Facebook HHVM
- CVE-2019-19792A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to ro
- CVE-2019-17549ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes.
- CVE-2020-4198IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2020-4197IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system.IBM Tivoli Netcool/OMNIbus
- CVE-2020-4196IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.IBM Tivoli Netcool/OMNIbus
- CVE-2020-9751Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upNaver Cloud Explorer