# CVEs published 2020-03-24 174 CVEs were published on March 24, 2020: 2 critical, 7 high. Days are UTC. - [CVE-2020-6816](https://cve.now/CVE-2020-6816.md): In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argume (no CVSS, Mozilla Bleach · bleach) - [CVE-2020-6802](https://cve.now/CVE-2020-6802.md): In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags (no CVSS, Mozilla Bleach · bleach) - [CVE-2019-4001](https://cve.now/CVE-2019-4001.md): Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code. (no CVSS, Druva inSync Client) - [CVE-2020-10942](https://cve.now/CVE-2020-10942.md): In the Linux kernel before 5.5.8, get\_raw\_socket in drivers/vhost/net.c lacks validation of an sk\_family field, which might allow attackers (no CVSS) - [CVE-2020-6080](https://cve.now/CVE-2020-6080.md): An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6079](https://cve.now/CVE-2020-6079.md): An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6072](https://cve.now/CVE-2020-6072.md): An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. (CVSS 9.8, Videolabs) - [CVE-2020-6071](https://cve.now/CVE-2020-6071.md): An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6073](https://cve.now/CVE-2020-6073.md): An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6078](https://cve.now/CVE-2020-6078.md): An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6077](https://cve.now/CVE-2020-6077.md): An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. (CVSS 7.5, Videolabs) - [CVE-2020-6997](https://cve.now/CVE-2020-6997.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-6991](https://cve.now/CVE-2020-6991.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-6981](https://cve.now/CVE-2020-6981.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-6979](https://cve.now/CVE-2020-6979.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibilit (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-7001](https://cve.now/CVE-2020-7001.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confident (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-7007](https://cve.now/CVE-2020-7007.md): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out (no CVSS, Moxa EDS-G516E Series firmware,) - [CVE-2020-8986](https://cve.now/CVE-2020-8986.md): lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an atta (no CVSS) - [CVE-2020-8985](https://cve.now/CVE-2020-8985.md): ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality. (no CVSS) - [CVE-2020-8984](https://cve.now/CVE-2020-8984.md): lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header. (no CVSS) - [CVE-2020-6978](https://cve.now/CVE-2020-6978.md): In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. (no CVSS, Honeywell WIN-PAK 4.7.2, Web and prior versions) - [CVE-2020-6982](https://cve.now/CVE-2020-6982.md): In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code exec (no CVSS, Honeywell WIN-PAK 4.7.2, Web and prior versions) - [CVE-2020-7005](https://cve.now/CVE-2020-7005.md): In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an a (no CVSS, Honeywell WIN-PAK 4.7.2, Web and prior versions) - [CVE-2019-20593](https://cve.now/CVE-2019-20593.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2019-20576](https://cve.now/CVE-2019-20576.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20625](https://cve.now/CVE-2019-20625.md): An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20624](https://cve.now/CVE-2019-20624.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2019-20623](https://cve.now/CVE-2019-20623.md): An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20622](https://cve.now/CVE-2019-20622.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20621](https://cve.now/CVE-2019-20621.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20620](https://cve.now/CVE-2019-20620.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20619](https://cve.now/CVE-2019-20619.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20618](https://cve.now/CVE-2019-20618.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20617](https://cve.now/CVE-2019-20617.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20616](https://cve.now/CVE-2019-20616.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2019-20615](https://cve.now/CVE-2019-20615.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2019-20614](https://cve.now/CVE-2019-20614.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20613](https://cve.now/CVE-2019-20613.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. (no CVSS) - [CVE-2019-20612](https://cve.now/CVE-2019-20612.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi, and SEC Wi-Fi chipsets) software. (no CVSS) - [CVE-2019-20611](https://cve.now/CVE-2019-20611.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), Go(8.1), P(9.0), and Go(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20610](https://cve.now/CVE-2019-20610.md): An issue was discovered on Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) soft (no CVSS) - [CVE-2019-20609](https://cve.now/CVE-2019-20609.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20608](https://cve.now/CVE-2019-20608.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20607](https://cve.now/CVE-2019-20607.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and (no CVSS) - [CVE-2020-6993](https://cve.now/CVE-2020-6993.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sen (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20606](https://cve.now/CVE-2019-20606.md): An issue was discovered on Samsung mobile devices with any (before May 2019) software. (no CVSS) - [CVE-2020-6995](https://cve.now/CVE-2020-6995.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak pass (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20605](https://cve.now/CVE-2019-20605.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20604](https://cve.now/CVE-2019-20604.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2019-20603](https://cve.now/CVE-2019-20603.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. (no CVSS) - [CVE-2019-20602](https://cve.now/CVE-2019-20602.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. (no CVSS) - [CVE-2019-20601](https://cve.now/CVE-2019-20601.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos7570, 7580, 7870, 7880, and 8890 chipsets) software (no CVSS) - [CVE-2020-6985](https://cve.now/CVE-2020-6985.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded ser (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20600](https://cve.now/CVE-2019-20600.md): An issue was discovered on Samsung mobile devices with O(8.0) and P(9.0) (Exynos8890 chipsets) software. (no CVSS) - [CVE-2019-20599](https://cve.now/CVE-2019-20599.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20598](https://cve.now/CVE-2019-20598.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2019-20597](https://cve.now/CVE-2019-20597.md): An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20596](https://cve.now/CVE-2019-20596.md): An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20595](https://cve.now/CVE-2019-20595.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20594](https://cve.now/CVE-2019-20594.md): An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20592](https://cve.now/CVE-2019-20592.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20591](https://cve.now/CVE-2019-20591.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20590](https://cve.now/CVE-2019-20590.md): An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. (no CVSS) - [CVE-2019-20589](https://cve.now/CVE-2019-20589.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2020-6987](https://cve.now/CVE-2020-6987.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak c (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20588](https://cve.now/CVE-2019-20588.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20587](https://cve.now/CVE-2019-20587.md): An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20586](https://cve.now/CVE-2019-20586.md): An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2020-6983](https://cve.now/CVE-2020-6983.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-c (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20585](https://cve.now/CVE-2019-20585.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20584](https://cve.now/CVE-2019-20584.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2020-6989](https://cve.now/CVE-2020-6989.md): In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serve (no CVSS, Moxa PT-7528 series firmware,) - [CVE-2019-20583](https://cve.now/CVE-2019-20583.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20582](https://cve.now/CVE-2019-20582.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos9810 chipsets) software. (no CVSS) - [CVE-2019-20581](https://cve.now/CVE-2019-20581.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20580](https://cve.now/CVE-2019-20580.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20579](https://cve.now/CVE-2019-20579.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20578](https://cve.now/CVE-2019-20578.md): An issue was discovered on Samsung mobile devices with P(9.0) (Exynos 9820 chipsets) software. (no CVSS) - [CVE-2019-20577](https://cve.now/CVE-2019-20577.md): An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20575](https://cve.now/CVE-2019-20575.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20574](https://cve.now/CVE-2019-20574.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20573](https://cve.now/CVE-2019-20573.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20572](https://cve.now/CVE-2019-20572.md): An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20571](https://cve.now/CVE-2019-20571.md): An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20570](https://cve.now/CVE-2019-20570.md): An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software. (no CVSS) - [CVE-2019-20569](https://cve.now/CVE-2019-20569.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20568](https://cve.now/CVE-2019-20568.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos and Qualcomm chipsets) software. (no CVSS) - [CVE-2019-20567](https://cve.now/CVE-2019-20567.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20566](https://cve.now/CVE-2019-20566.md): An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software. (no CVSS) - [CVE-2019-20565](https://cve.now/CVE-2019-20565.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. (no CVSS) - [CVE-2019-20564](https://cve.now/CVE-2019-20564.md): An issue was discovered on Samsung mobile devices with any (before October 2019 for S9 or Note9) software. (no CVSS) - [CVE-2019-20563](https://cve.now/CVE-2019-20563.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20562](https://cve.now/CVE-2019-20562.md): An issue was discovered on Samsung mobile devices with P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20561](https://cve.now/CVE-2019-20561.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20560](https://cve.now/CVE-2019-20560.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. (no CVSS) - [CVE-2019-20559](https://cve.now/CVE-2019-20559.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20558](https://cve.now/CVE-2019-20558.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20557](https://cve.now/CVE-2019-20557.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20556](https://cve.now/CVE-2019-20556.md): An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150\_FUSION, exynos7885, exynos9610, and exynos9820 chipset (no CVSS) - [CVE-2019-20555](https://cve.now/CVE-2019-20555.md): An issue was discovered on Samsung mobile devices with N(7.x) software. (no CVSS) - [CVE-2019-20554](https://cve.now/CVE-2019-20554.md): An issue was discovered on Samsung mobile devices with O(8.x) software. (no CVSS) - [CVE-2019-20553](https://cve.now/CVE-2019-20553.md): An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150\_FUSION, exynos7885, exynos9610, and exynos9820 chipset (no CVSS) - [CVE-2019-20552](https://cve.now/CVE-2019-20552.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20551](https://cve.now/CVE-2019-20551.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. (no CVSS) - [CVE-2019-20550](https://cve.now/CVE-2019-20550.md): An issue was discovered on Samsung mobile devices with O(8.x) (released in China and India) software. (no CVSS) - [CVE-2019-20628](https://cve.now/CVE-2019-20628.md): An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. (no CVSS) - [CVE-2019-20629](https://cve.now/CVE-2019-20629.md): An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. (no CVSS) - [CVE-2019-20630](https://cve.now/CVE-2019-20630.md): An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. (no CVSS) - [CVE-2019-20631](https://cve.now/CVE-2019-20631.md): An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. (no CVSS) - [CVE-2019-20632](https://cve.now/CVE-2019-20632.md): An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. (no CVSS) - [CVE-2019-20549](https://cve.now/CVE-2019-20549.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. (no CVSS) - [CVE-2019-20548](https://cve.now/CVE-2019-20548.md): An issue was discovered on Samsung mobile devices with P(9.0) devices (Qualcomm chipsets) software. (no CVSS) - [CVE-2019-20547](https://cve.now/CVE-2019-20547.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. (no CVSS) - [CVE-2019-20546](https://cve.now/CVE-2019-20546.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software. (no CVSS) - [CVE-2019-20545](https://cve.now/CVE-2019-20545.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20544](https://cve.now/CVE-2019-20544.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20543](https://cve.now/CVE-2019-20543.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20542](https://cve.now/CVE-2019-20542.md): An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20541](https://cve.now/CVE-2019-20541.md): An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20540](https://cve.now/CVE-2019-20540.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20539](https://cve.now/CVE-2019-20539.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. (no CVSS) - [CVE-2019-20538](https://cve.now/CVE-2019-20538.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20537](https://cve.now/CVE-2019-20537.md): An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). (no CVSS) - [CVE-2019-20536](https://cve.now/CVE-2019-20536.md): An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. (no CVSS) - [CVE-2019-20535](https://cve.now/CVE-2019-20535.md): An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. (no CVSS) - [CVE-2019-17276](https://cve.now/CVE-2019-17276.md): OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that co (no CVSS, OnCommand System Manager 9.x) - [CVE-2019-20534](https://cve.now/CVE-2019-20534.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2019-20533](https://cve.now/CVE-2019-20533.md): An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (released in China or India) software. (no CVSS) - [CVE-2019-20532](https://cve.now/CVE-2019-20532.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2019-20531](https://cve.now/CVE-2019-20531.md): An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2019-20530](https://cve.now/CVE-2019-20530.md): An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10855](https://cve.now/CVE-2020-10855.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2020-10854](https://cve.now/CVE-2020-10854.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10853](https://cve.now/CVE-2020-10853.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2020-10852](https://cve.now/CVE-2020-10852.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10851](https://cve.now/CVE-2020-10851.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-10850](https://cve.now/CVE-2020-10850.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. (no CVSS) - [CVE-2020-10849](https://cve.now/CVE-2020-10849.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos7885, Exynos8895, and Exynos9810 chipsets) softwar (no CVSS) - [CVE-2020-10848](https://cve.now/CVE-2020-10848.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. (no CVSS) - [CVE-2020-10847](https://cve.now/CVE-2020-10847.md): An issue was discovered on Samsung mobile devices with P(9.0) (Galaxy S8 and Note8) software. (no CVSS) - [CVE-2020-10846](https://cve.now/CVE-2020-10846.md): An issue was discovered on Samsung mobile devices with P(9.x) and Q(10.x) software. (no CVSS) - [CVE-2020-10845](https://cve.now/CVE-2020-10845.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10844](https://cve.now/CVE-2020-10844.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.x), and Q(10.0) software. (no CVSS) - [CVE-2020-10843](https://cve.now/CVE-2020-10843.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. (no CVSS) - [CVE-2020-10842](https://cve.now/CVE-2020-10842.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. (no CVSS) - [CVE-2020-10841](https://cve.now/CVE-2020-10841.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. (no CVSS) - [CVE-2020-10840](https://cve.now/CVE-2020-10840.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. (no CVSS) - [CVE-2020-10839](https://cve.now/CVE-2020-10839.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10838](https://cve.now/CVE-2020-10838.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-10837](https://cve.now/CVE-2020-10837.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. (no CVSS) - [CVE-2020-10836](https://cve.now/CVE-2020-10836.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. (no CVSS) - [CVE-2020-10835](https://cve.now/CVE-2020-10835.md): An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. (no CVSS) - [CVE-2020-10834](https://cve.now/CVE-2020-10834.md): An issue was discovered on Samsung mobile devices with P(9.0) software. (no CVSS) - [CVE-2020-10833](https://cve.now/CVE-2020-10833.md): An issue was discovered on Samsung mobile devices with Q(10.0) software. (no CVSS) - [CVE-2020-10832](https://cve.now/CVE-2020-10832.md): An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. (no CVSS) - [CVE-2020-10831](https://cve.now/CVE-2020-10831.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS) - [CVE-2020-10830](https://cve.now/CVE-2020-10830.md): An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. (no CVSS) - [CVE-2020-7003](https://cve.now/CVE-2020-7003.md): In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive informatio (no CVSS, Moxa ioLogik 2500 series firmware,) - [CVE-2020-10829](https://cve.now/CVE-2020-10829.md): An issue was discovered on Samsung mobile devices with O(8.0), P(9.0), and Q(10.0) (Broadcom chipsets) software. (no CVSS) - [CVE-2019-18242](https://cve.now/CVE-2019-18242.md): In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multipl (no CVSS, Moxa ioLogik 2500 series firmware,) - [CVE-2020-6972](https://cve.now/CVE-2020-6972.md): In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay at (no CVSS, Honeywell Notifier Web Server (NWS)) - [CVE-2020-10938](https://cve.now/CVE-2020-10938.md): GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c. (no CVSS) - [CVE-2020-4309](https://cve.now/CVE-2020-4309.md): IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks ag (CVSS 4.3, IBM Content Navigator) - [CVE-2020-4253](https://cve.now/CVE-2020-4253.md): IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on (CVSS 6.3, IBM Content Navigator) - [CVE-2019-4681](https://cve.now/CVE-2019-4681.md): IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. (CVSS 6.1, IBM Tivoli Netcool Impact) - [CVE-2019-4553](https://cve.now/CVE-2019-4553.md): IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt hig (CVSS 5.9, IBM API Connect) - [CVE-2020-10934](https://cve.now/CVE-2020-10934.md): Acyba AcyMailing before 6.9.2 mishandles file uploads by admins. (no CVSS) - [CVE-2020-10931](https://cve.now/CVE-2020-10931.md): Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try (no CVSS) - [CVE-2020-10570](https://cve.now/CVE-2020-10570.md): The Telegram application through 5.12 for Android, when Show Popup is enabled, might allow physically proximate attackers to bypass intended (no CVSS) - [CVE-2020-1747](https://cve.now/CVE-2020-1747.md): A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it p (CVSS 9.8, Red Hat PyYAML · pyyaml) - [CVE-2020-9359](https://cve.now/CVE-2020-9359.md): KDE Okular before 1.10.0 allows code execution via an action link in a PDF document. (no CVSS) - [CVE-2020-10684](https://cve.now/CVE-2020-10684.md): A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible\_fa (CVSS 7.9, Red Hat Ansible · ansible) - [CVE-2020-10941](https://cve.now/CVE-2020-10941.md): Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import. (no CVSS) - [CVE-2020-1744](https://cve.now/CVE-2020-1744.md): A flaw was found in keycloak before version 9.0.1. (CVSS 5.6, Red Hat keycloak · org.keycloak:keycloak-core) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-03-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.