# CVEs published 2020-03-03

14 CVEs were published on March 3, 2020: 0 critical, 3 high. Days are UTC.

- [CVE-2020-1734](https://cve.now/CVE-2020-1734.md): A flaw was found in the pipe lookup plugin of ansible. (CVSS 7.4, Red Hat Ansible · ansible)
- [CVE-2020-5403](https://cve.now/CVE-2020-5403.md): DoS Via Malformed URL with Reactor Netty HTTP Server (CVSS 6.5, Pivotal Reactor Netty · io.projectreactor.netty:reactor-net…)
- [CVE-2020-5404](https://cve.now/CVE-2020-5404.md): Authentication Leak On Redirect With Reactor Netty HttpClient (CVSS 6.5, Pivotal Reactor Netty · io.projectreactor.netty:reactor-net…)
- [CVE-2020-1892](https://cve.now/CVE-2020-1892.md): Insufficient boundary checks when decoding JSON in JSON\_parser allows read access to out of bounds memory, potentially leading to informatio (no CVSS, Facebook HHVM)
- [CVE-2020-1893](https://cve.now/CVE-2020-1893.md): Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. (no CVSS, Facebook HHVM)
- [CVE-2020-1888](https://cve.now/CVE-2020-1888.md): Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. (no CVSS, Facebook HHVM)
- [CVE-2019-19792](https://cve.now/CVE-2019-19792.md): A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to ro (CVSS 5.2)
- [CVE-2019-17549](https://cve.now/CVE-2019-17549.md): ESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes. (no CVSS)
- [CVE-2020-4198](https://cve.now/CVE-2020-4198.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2020-4197](https://cve.now/CVE-2020-4197.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 allows web pages to be stored locally which can be read by another user on the system. (CVSS 2.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2020-4196](https://cve.now/CVE-2020-4196.md): IBM Tivoli Netcool/OMNIbus\_GUI 8.1.0 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Tivoli Netcool/OMNIbus)
- [CVE-2019-3696](https://cve.now/CVE-2019-3696.md): pcp: Local privilege escalation from user pcp to root through migrate\_tempdirs (CVSS 8.4, SUSE Linux Enterprise High Performance Computing 15-ESPO… +7)
- [CVE-2019-3695](https://cve.now/CVE-2019-3695.md): pcp: Local privilege escalation from user pcp to root (CVSS 8.4, SUSE Linux Enterprise High Performance Computing 15-ESPO… +7)
- [CVE-2020-9751](https://cve.now/CVE-2020-9751.md): Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the up (no CVSS, Naver Cloud Explorer)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.