CVEs published March 4, 2020
41 CVEs were published on March 4, 2020: 1 critical, 5 high. 1 is now in CISA KEV.
- Published
- 41
- Critical
- 1
- High
- 5
- Medium
- 9
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Cisco Prime Collaboration Provisioning
- 2
- Cisco WebEx WRF Player
- 2
- Plat'Home Co. OpenBlocks IoT VX2
- 2
- 360 Security Technology 360 Router F5C
- 1
- Cisco Email Security Appliance
- 1
- Cisco Identity Services Engine Software
- 1
- Cisco IOS XR Software
- 1
- Cisco Jabber IM for Android
- 1
- Cisco Prime Network Registrar
- 1
- Cisco Remote PHY
- 1
Critical 1
High 5
- CVE-2020-3155Cisco Intelligent Proximity SSL Certificate Validation VulnerabilityCisco Jabber IM for Android
- CVE-2020-3148Cisco Prime Network Registrar Cross-Site Request Forgery VulnerabilityCisco Prime Network Registrar
- CVE-2020-3128Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2020-3127Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilitiesCisco WebEx WRF Player
- CVE-2020-5251Information disclosure in parse-serverparse-community parse-server · parse-server
Medium, low and unrated 35
- CVE-2019-17644An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2..
- CVE-2019-17643An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2.
- CVE-2020-8660CNCF Envoy through 1.13.0 TLS inspector bypass.
- CVE-2020-8664CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context.
- CVE-2020-8661CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.
- CVE-2020-8659CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e.
- CVE-2020-7130HPE OneView Global Dashboard (OVGD) 1.9 has a remote information disclosure vulnerability.HPE OneView Global Dashboard
- CVE-2020-3176Cisco Remote PHY Device Software Command Injection VulnerabilityCisco Remote PHY
- CVE-2020-3164Cisco ESA, Cisco WSA, and Cisco SMA GUI Denial of Service VulnerabilityCisco Web Security Appliance
- CVE-2020-3157Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco Identity Services Engine Software
- CVE-2020-3193Cisco Prime Collaboration Provisioning Information Disclosure VulnerabilityCisco Prime Collaboration Provisioning
- CVE-2020-3192Cisco Prime Collaboration Provisioning Cross-Site Scripting VulnerabilityCisco Prime Collaboration Provisioning
- CVE-2020-3190Cisco IOS XR Software IPsec Packet Processor Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2020-3185Cisco TelePresence Management Suite Stored Cross-Site Scripting VulnerabilityCisco TelePresence Management Suite
- CVE-2020-3182Cisco Webex Meetings Client for MacOS Information Disclosure VulnerabilityCisco Webex Meetings
- CVE-2020-3181Cisco Email Security Appliance Uncontrolled Resource Exhaustion VulnerabilityCisco Email Security Appliance
- CVE-2020-9550Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoo
- CVE-2020-9477An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices.
- CVE-2020-9476ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing
- CVE-2020-9372The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking
- CVE-2020-9371Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress.
- CVE-2019-19226A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to enable or
- CVE-2019-19225A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to change DN
- CVE-2019-19224A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to download
- CVE-2019-19223A Broken Access Control vulnerability in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an attacker to reboot th
- CVE-2019-19222A Stored XSS issue in the D-Link DSL-2680 web administration interface (Firmware EU_1.03) allows an authenticated attacker to inject arbitra
- CVE-2020-10057GeniXCMS 1.1.7 is vulnerable to user privilege escalation due to broken access control.
- CVE-2020-7988An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4.
- CVE-2020-9761An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020.
- CVE-2020-9757The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontnystudio107/craft-seomatic
- CVE-2020-9364An issue was discovered in helpers/mailer.php in the Creative Contact Form extension 4.6.2 before 2019-12-03 for Joomla!.
- CVE-2019-3404By adding some special fields to the uri ofrouter app function, the user could abuse background app cgi functions withoutauthentication.360 Security Technology 360 Router F5C
- CVE-2020-5535OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with roPlat'Home Co. OpenBlocks IoT VX2
- CVE-2020-5536OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialiPlat'Home Co. OpenBlocks IoT VX2
- CVE-2020-10029The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long do