CVEs published March 6, 2020
24 CVEs were published on March 6, 2020: 2 critical, 1 high. 1 is now in CISA KEV.
- Published
- 24
- Critical
- 2
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 21
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Dell Encryption Enterprise
- 1
- Dell Isilon OneFS
- 1
- urllib3
- 1
Critical 2
- CVE-2020-5328Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks whDell Isilon OneFS
- CVE-2020-10189Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage
High 1
Medium, low and unrated 21
- CVE-2020-8634Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface,
- CVE-2020-8635Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files.
- CVE-2020-10212upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and b
- CVE-2019-19772Various Lexmark products have reflected XSS in the embedded web server used in older generation Lexmark devices.
- CVE-2019-19773Various Lexmark products have stored XSS in the embedded web server used in older generation Lexmark devices.
- CVE-2020-10112Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning.
- CVE-2020-10111Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests.
- CVE-2020-10110Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching.
- CVE-2020-10193ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive.
- CVE-2020-7212The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU courllib3
- CVE-2020-9458In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privilege
- CVE-2020-9457The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vuln
- CVE-2020-9456In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privilege
- CVE-2020-9455The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary ema
- CVE-2020-9454A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a
- CVE-2020-8113GitLab 10.7 and later through 12.7.2 has Incorrect Access Control.
- CVE-2020-9531An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices.
- CVE-2020-9530An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices.
- CVE-2020-9756Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control.
- CVE-2020-10188utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, becaus
- CVE-2019-20503usrsctp before 2019-12-20 has out-of-bounds reads in sctp_load_addresses_from_init.