CVEs published March 15, 2020
26 CVEs were published on March 15, 2020: 0 critical, 2 high.
- Published
- 26
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Android
- 8
- closure-compiler-stream
- 1
- com.walmartlabs.concord:concord-common
- 1
- docker-compose-remote-api
- 1
- dot
- 1
- drf-jwt
- 1
- Fortinet FortiAP-S/W2 · Fortinet FortiAP-U +1
- 1
- Fortinet FortiClientEMS
- 1
- Fortinet FortiClientWindows
- 1
- Fortinet FortiManager
- 1
High 2
- CVE-2020-9287A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableFortinet FortiClientEMS
- CVE-2020-9290A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableFortinet FortiClientWindows
Medium, low and unrated 24
- CVE-2019-15708A system command injection vulnerability in the FortiAP-S/W2 6.2.1, 6.2.0, 6.0.5 and below, FortiAP 6.0.5 and below and FortiAP-U below 6.0.Fortinet FortiAP-S/W2 · Fortinet FortiAP-U +1
- CVE-2019-17654An Insufficient Verification of Data Authenticity vulnerability in FortiManager 6.2.1, 6.2.0, 6.0.6 and below may allow an unauthenticated aFortinet FortiManager
- CVE-2019-6696An improper input validation vulnerability in FortiOS 6.2.1, 6.2.0, 6.0.8 and below until 5.4.0 under admin webUI may allow an attacker to pFortinet FortiOS
- CVE-2020-7603closure-compiler-stream through 0.1.15 allows execution of arbitrary commands.closure-compiler-stream
- CVE-2020-7607gulp-styledocco through 0.0.3 allows execution of arbitrary commands.gulp-styledocco
- CVE-2020-7605gulp-tape through 1.0.0 allows execution of arbitrary commands.gulp-tape
- CVE-2020-7606docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands.docker-compose-remote-api
- CVE-2020-7604pulverizr through 0.7.0 allows execution of arbitrary commands.pulverizr
- CVE-2020-7602node-prompt-here through 1.0.1 allows execution of arbitrary commands.node-prompt-here
- CVE-2020-7601gulp-scss-lint through 1.0.0 allows execution of arbitrary commands.gulp-scss-lint
- CVE-2020-10594An issue was discovered in drf-jwt 1.15.x before 1.15.1.drf-jwt
- CVE-2019-9474In Bluetooth, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2019-9473In Bluetooth, there is a possible out of bounds read due to a missing bounds check.Android
- CVE-2020-0088In parseTrackFragmentRun of MPEG4Extractor.cpp, there is possible resource exhaustion due to improper input validation.Android
- CVE-2020-0086In readCString of Parcel.cpp, there is a possible out of bounds write due to an integer overflow.Android
- CVE-2019-2058In libAACdec, there is a possible out of bounds read.Android
- CVE-2019-2088In StatsService, there is a possible out of bounds read.Android
- CVE-2019-2089In app uninstallation, there is a possible set of permissions that may not be removed from a shared app ID.Android
- CVE-2019-2216In overlay notifications, there is a possible hidden notification due to improper input validation.Android
- CVE-2020-10591An issue was discovered in Walmart Labs Concord before 1.44.0.com.walmartlabs.concord:concord-common
- CVE-2020-10589v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains comman
- CVE-2020-10588v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged us
- CVE-2019-15608The package integrity validation in yarn < 1.19.0 contains a TOCTOU vulnerability where the hash is computed before writing a package to cacyarn
- CVE-2020-8141The dot package v1.1.2 uses Function() to compile templates.dot