CVEs published March 8, 2020
7 CVEs were published on March 8, 2020: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 7
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 6
- CVE-2020-10232In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing log
- CVE-2020-10233In version 4.8.0 and earlier of The Sleuth Kit (TSK), there is a heap-based buffer over-read in ntfs_dinode_lookup in fs/ntfs.c.
- CVE-2020-10224An unauthenticated file upload vulnerability has been identified in admin_add.php in PHPGurukul Online Book Store 1.0.
- CVE-2020-10225An unauthenticated file upload vulnerability has been identified in admin/gallery.php in PHPGurukul Job Portal 1.0.
- CVE-2020-10222npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document.
- CVE-2020-10223npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::c