CVEs published March 11, 2020
44 CVEs were published on March 11, 2020: 4 critical, 7 high. 1 is now in CISA KEV.
- Published
- 44
- Critical
- 4
- High
- 7
- Medium
- 4
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 1
- Fix available
- 9
Most affected products
- WAGO PFC200
- 13
- Palo Alto Networks PAN-OS
- 3
- Apache Software Foundation Apache ShardingSphere · org.apac…
- 1
- Apache WSS4J · Red Hat JBossWS +2
- 1
- bcosca/fatfree
- 1
- minimist
- 1
- NVIDIA GPU Display Driver
- 1
- phpbb/phpbb
- 1
- Puppet Enterprise 2018.1.x stream · Puppet Enterprise +3
- 1
- Red Hat Ansible · ansible
- 1
Critical 4
- CVE-2020-9408TIBCO Spotfire Server Script Trust Problem Exposes Remote Code Execution VulnerabilityTIBCO Software TIBCO Spotfire Analytics Platform for AWS Ma…
- CVE-2020-10181goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (admini
- CVE-2019-9096An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9104An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
High 7
- CVE-2020-1979PAN-OS: A format string vulnerability in PAN-OS log daemon (logd) on Panorama allows local privilege escalationPalo Alto Networks PAN-OS
- CVE-2020-1980PAN-OS: Shell injection vulnerability in PAN-OS CLI allows execution of shell commandsPalo Alto Networks PAN-OS
- CVE-2020-1981PAN-OS: Predictable temporary filename vulnerability allows local privilege escalationPalo Alto Networks PAN-OS
- CVE-2019-9097An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9098An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9099An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9101An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
Medium, low and unrated 33
- CVE-2019-5181An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5180An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5179An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5178An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5177An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5176An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-5171An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5170An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5169An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5174An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14).WAGO PFC200 Firmware
- CVE-2019-5175An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5172An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5173An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.0WAGO PFC200
- CVE-2019-5182An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 FiWAGO PFC200
- CVE-2019-10808utilitify prior to 1.0.3 allows modification of object properties.utilitify
- CVE-2020-7943Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints.Puppet Enterprise 2018.1.x stream · Puppet Enterprise +3
- CVE-2020-7598minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.minimist
- CVE-2020-5958NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with loNVIDIA GPU Display Driver
- CVE-2020-1947In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputsApache Software Foundation Apache ShardingSphere · org.apac…
- CVE-2016-1000111Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applicationtwisted
- CVE-2020-1733A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unpriviRed Hat Ansible · ansible
- CVE-2013-1753The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory
- CVE-2020-8540An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated
- CVE-2011-2487The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a BlApache WSS4J · Red Hat JBossWS +2
- CVE-2012-1101systemd 37-1 does not properly handle non-existent services, which causes a denial of service (failure of login procedure).systemd
- CVE-2019-9095An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9102An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2019-9103An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
- CVE-2020-10376Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bas
- CVE-2020-5203In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUbcosca/fatfree
- CVE-2019-19381oauth/oauth2/v1/saml/ in Abacus OAuth Login 2019_01_r4_20191021_0000 before prior to R4 (20.11.2019 Hotfix) allows Reflected Cross Site Scri
- CVE-2019-16107Missing form token validation in phpBB 3.2.7 allows CSRF in deleting post attachments.phpbb/phpbb
- CVE-2020-10385A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.