# CVEs published 2020-03-07

8 CVEs were published on March 7, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-10220](https://cve.now/CVE-2020-10220.md): An issue was discovered in rConfig through 3.9.4. (no CVSS)
- [CVE-2020-10214](https://cve.now/CVE-2020-10214.md): An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. (no CVSS)
- [CVE-2020-10215](https://cve.now/CVE-2020-10215.md): An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. (no CVSS)
- [CVE-2020-10216](https://cve.now/CVE-2020-10216.md): An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. (no CVSS)
- [CVE-2020-10213](https://cve.now/CVE-2020-10213.md): An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. (no CVSS)
- [CVE-2020-8439](https://cve.now/CVE-2020-8439.md): Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit U (no CVSS)
- [CVE-2020-9470](https://cve.now/CVE-2020-9470.md): An issue was discovered in Wing FTP Server 6.2.5 before February 2020. (no CVSS)
- [CVE-2020-9281](https://cve.now/CVE-2020-9281.md): A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitra (no CVSS, ckeditor4)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-03-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.