CVEs published March 24, 2020
174 CVEs were published on March 24, 2020: 2 critical, 7 high.
- Published
- 174
- Critical
- 2
- High
- 7
- Medium
- 5
- Low
- 0
- Unrated
- 160
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Videolabs
- 7
- Moxa EDS-G516E Series firmware,
- 6
- Moxa PT-7528 series firmware,
- 6
- Honeywell WIN-PAK 4.7.2, Web and prior versions
- 3
- IBM Content Navigator
- 2
- Moxa ioLogik 2500 series firmware,
- 2
- Mozilla Bleach · bleach
- 2
- Druva inSync Client
- 1
- Honeywell Notifier Web Server (NWS)
- 1
- IBM API Connect
- 1
Critical 2
- CVE-2020-6072An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-1747A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it pRed Hat PyYAML · pyyaml
High 7
- CVE-2020-6080An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-6079An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-6071An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-6073An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-6078An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-6077An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0.Videolabs
- CVE-2020-10684A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_faRed Hat Ansible · ansible
Medium, low and unrated 165
- CVE-2020-6816In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argumeMozilla Bleach · bleach
- CVE-2020-6802In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tagsMozilla Bleach · bleach
- CVE-2019-4001Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code.Druva inSync Client
- CVE-2020-10942In the Linux kernel before 5.5.8, get_raw_socket in drivers/vhost/net.c lacks validation of an sk_family field, which might allow attackers
- CVE-2020-6997In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext.Moxa EDS-G516E Series firmware,
- CVE-2020-6991In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.Moxa EDS-G516E Series firmware,
- CVE-2020-6981In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.Moxa EDS-G516E Series firmware,
- CVE-2020-6979In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibilitMoxa EDS-G516E Series firmware,
- CVE-2020-7001In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidentMoxa EDS-G516E Series firmware,
- CVE-2020-7007In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go outMoxa EDS-G516E Series firmware,
- CVE-2020-8986lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an atta
- CVE-2020-8985ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.
- CVE-2020-8984lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.
- CVE-2020-6978In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.Honeywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2020-6982In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execHoneywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2020-7005In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an aHoneywell WIN-PAK 4.7.2, Web and prior versions
- CVE-2019-20593An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2019-20576An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20625An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software.
- CVE-2019-20624An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2019-20623An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software.
- CVE-2019-20622An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20621An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20620An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20619An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20618An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20617An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20616An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2019-20615An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2019-20614An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20613An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software.
- CVE-2019-20612An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi, and SEC Wi-Fi chipsets) software.
- CVE-2019-20611An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), Go(8.1), P(9.0), and Go(9.0) (Exynos chipsets) software.
- CVE-2019-20610An issue was discovered on Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) soft
- CVE-2019-20609An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20608An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20607An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and
- CVE-2020-6993In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to senMoxa PT-7528 series firmware,
- CVE-2019-20606An issue was discovered on Samsung mobile devices with any (before May 2019) software.
- CVE-2020-6995In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak passMoxa PT-7528 series firmware,
- CVE-2019-20605An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20604An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2019-20603An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software.
- CVE-2019-20602An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software.
- CVE-2019-20601An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos7570, 7580, 7870, 7880, and 8890 chipsets) software
- CVE-2020-6985In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded serMoxa PT-7528 series firmware,
- CVE-2019-20600An issue was discovered on Samsung mobile devices with O(8.0) and P(9.0) (Exynos8890 chipsets) software.
- CVE-2019-20599An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20598An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2019-20597An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software.
- CVE-2019-20596An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software.
- CVE-2019-20595An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20594An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software.
- CVE-2019-20592An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20591An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20590An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software.
- CVE-2019-20589An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2020-6987In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cMoxa PT-7528 series firmware,
- CVE-2019-20588An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20587An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20586An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software.
- CVE-2020-6983In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-cMoxa PT-7528 series firmware,
- CVE-2019-20585An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20584An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2020-6989In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serveMoxa PT-7528 series firmware,
- CVE-2019-20583An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20582An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos9810 chipsets) software.
- CVE-2019-20581An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20580An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20579An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20578An issue was discovered on Samsung mobile devices with P(9.0) (Exynos 9820 chipsets) software.
- CVE-2019-20577An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software.
- CVE-2019-20575An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20574An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20573An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20572An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software.
- CVE-2019-20571An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software.
- CVE-2019-20570An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software.
- CVE-2019-20569An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20568An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos and Qualcomm chipsets) software.
- CVE-2019-20567An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20566An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software.
- CVE-2019-20565An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software.
- CVE-2019-20564An issue was discovered on Samsung mobile devices with any (before October 2019 for S9 or Note9) software.
- CVE-2019-20563An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20562An issue was discovered on Samsung mobile devices with P(9.0) (with TEEGRIS) software.
- CVE-2019-20561An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20560An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software.
- CVE-2019-20559An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20558An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20557An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20556An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipset
- CVE-2019-20555An issue was discovered on Samsung mobile devices with N(7.x) software.
- CVE-2019-20554An issue was discovered on Samsung mobile devices with O(8.x) software.
- CVE-2019-20553An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipset
- CVE-2019-20552An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20551An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software.
- CVE-2019-20550An issue was discovered on Samsung mobile devices with O(8.x) (released in China and India) software.
- CVE-2019-20628An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box.
- CVE-2019-20629An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box.
- CVE-2019-20630An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box.
- CVE-2019-20631An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box.
- CVE-2019-20632An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box.
- CVE-2019-20549An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software.
- CVE-2019-20548An issue was discovered on Samsung mobile devices with P(9.0) devices (Qualcomm chipsets) software.
- CVE-2019-20547An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software.
- CVE-2019-20546An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software.
- CVE-2019-20545An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software.
- CVE-2019-20544An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software.
- CVE-2019-20543An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20542An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20541An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software.
- CVE-2019-20540An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software.
- CVE-2019-20539An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software.
- CVE-2019-20538An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20537An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets).
- CVE-2019-20536An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software.
- CVE-2019-20535An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software.
- CVE-2019-17276OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that coOnCommand System Manager 9.x
- CVE-2019-20534An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2019-20533An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (released in China or India) software.
- CVE-2019-20532An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2019-20531An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software.
- CVE-2019-20530An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10855An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2020-10854An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10853An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2020-10852An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10851An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-10850An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software.
- CVE-2020-10849An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos7885, Exynos8895, and Exynos9810 chipsets) softwar
- CVE-2020-10848An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software.
- CVE-2020-10847An issue was discovered on Samsung mobile devices with P(9.0) (Galaxy S8 and Note8) software.
- CVE-2020-10846An issue was discovered on Samsung mobile devices with P(9.x) and Q(10.x) software.
- CVE-2020-10845An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10844An issue was discovered on Samsung mobile devices with O(8.x), P(9.x), and Q(10.0) software.
- CVE-2020-10843An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software.
- CVE-2020-10842An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software.
- CVE-2020-10841An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software.
- CVE-2020-10840An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software.
- CVE-2020-10839An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10838An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-10837An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software.
- CVE-2020-10836An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software.
- CVE-2020-10835An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software.
- CVE-2020-10834An issue was discovered on Samsung mobile devices with P(9.0) software.
- CVE-2020-10833An issue was discovered on Samsung mobile devices with Q(10.0) software.
- CVE-2020-10832An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software.
- CVE-2020-10831An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software.
- CVE-2020-10830An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software.
- CVE-2020-7003In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive informatioMoxa ioLogik 2500 series firmware,
- CVE-2020-10829An issue was discovered on Samsung mobile devices with O(8.0), P(9.0), and Q(10.0) (Broadcom chipsets) software.
- CVE-2019-18242In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiplMoxa ioLogik 2500 series firmware,
- CVE-2020-6972In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay atHoneywell Notifier Web Server (NWS)
- CVE-2020-10938GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c.
- CVE-2020-4309IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks agIBM Content Navigator
- CVE-2020-4253IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on IBM Content Navigator
- CVE-2019-4681IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting.IBM Tivoli Netcool Impact
- CVE-2019-4553IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt higIBM API Connect
- CVE-2020-10934Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.
- CVE-2020-10931Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try
- CVE-2020-10570The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended
- CVE-2020-9359KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
- CVE-2020-10941Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
- CVE-2020-1744A flaw was found in keycloak before version 9.0.1.Red Hat keycloak · org.keycloak:keycloak-core