# CVEs published 2020-03-14

12 CVEs were published on March 14, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-10587](https://cve.now/CVE-2020-10587.md): antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration. (no CVSS)
- [CVE-2020-10578](https://cve.now/CVE-2020-10578.md): An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. (no CVSS)
- [CVE-2020-10573](https://cve.now/CVE-2020-10573.md): An issue was discovered in Janus through 0.9.1. (no CVSS)
- [CVE-2020-10574](https://cve.now/CVE-2020-10574.md): An issue was discovered in Janus through 0.9.1. (no CVSS)
- [CVE-2020-10576](https://cve.now/CVE-2020-10576.md): An issue was discovered in Janus through 0.9.1. (no CVSS)
- [CVE-2020-10577](https://cve.now/CVE-2020-10577.md): An issue was discovered in Janus through 0.9.1. (no CVSS)
- [CVE-2020-10575](https://cve.now/CVE-2020-10575.md): An issue was discovered in Janus through 0.9.1. (no CVSS)
- [CVE-2020-10571](https://cve.now/CVE-2020-10571.md): An issue was discovered in psd-tools before 1.9.4. (no CVSS, psd-tools)
- [CVE-2020-10568](https://cve.now/CVE-2020-10568.md): The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. (no CVSS)
- [CVE-2020-10565](https://cve.now/CVE-2020-10565.md): grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command ( (no CVSS)
- [CVE-2020-10566](https://cve.now/CVE-2020-10566.md): grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leadin (no CVSS)
- [CVE-2020-10567](https://cve.now/CVE-2020-10567.md): An issue was discovered in Responsive Filemanager through 9.14.0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.