>> ARCHIVE: 2020-03

ProficySCADA for iOS version 5.0.25920 suffers from a denial of service vulnerability.

Google Chrome version 80.0.3987.87 heap-corruption remote denial of service proof of concept exploit.

CyberArk PSMP versions 10.9.1 and below suffer from a policy restriction bypass vulnerability.

EnovaNet Chateau-Thierry FormaLog WebService02 eChampagne version 7.0 suffers from cross site scripting and remote SQL injection vulnerabilities.

rConfig version 3.9.4 suffers from a search.crud.php remote command injection vulnerability.

Joomla HDWPlayer component version 4.2 suffers from a remote SQL injection vulnerability.

FIBARO System Home Center version 5.021 suffers from cross site scripting and remote file inclusion vulnerabilities.

The Horde_Data module version 2.1.4 (and before) present in Horde Groupware version 5.2.22 allows authenticated users to inject arbitrary PHP code thus achieving remote code execution the server hosting the…