CVEs published March 22, 2020
14 CVEs were published on March 22, 2020: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 4
Most affected products
- phpmyadmin/phpmyadmin
- 3
- ezsystems/ezpublish-kernel · ezsystems/ezpublish-legacy
- 1
Medium, low and unrated 14
- CVE-2020-10818Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.
- CVE-2020-10819Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.
- CVE-2020-10820Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.
- CVE-2020-10821Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.
- CVE-2020-10809An issue was discovered in HDF5 through 1.12.0.
- CVE-2020-10810An issue was discovered in HDF5 through 1.12.0.
- CVE-2020-10811An issue was discovered in HDF5 through 1.12.0.
- CVE-2020-10812An issue was discovered in HDF5 through 1.12.0.
- CVE-2020-10808Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint.
- CVE-2020-10807auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host heade
- CVE-2020-10806eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.ezsystems/ezpublish-kernel · ezsystems/ezpublish-legacy
- CVE-2020-10802In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not propphpmyadmin/phpmyadmin
- CVE-2020-10803In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigphpmyadmin/phpmyadmin
- CVE-2020-10804In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in librarphpmyadmin/phpmyadmin