# CVEs published 2020-01-01

5 CVEs were published on January 1, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2019-20208](https://cve.now/CVE-2019-20208.md): dimC\_Read in isomedia/box\_code\_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow. (no CVSS)
- [CVE-2019-20205](https://cve.now/CVE-2019-20205.md): libsixel 1.8.4 has an integer overflow in sixel\_frame\_resize in frame.c. (no CVSS)
- [CVE-2019-20204](https://cve.now/CVE-2019-20204.md): The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/\* at the beginning and a crafted SV (no CVSS)
- [CVE-2019-20203](https://cve.now/CVE-2019-20203.md): The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From inf (no CVSS)
- [CVE-2020-5179](https://cve.now/CVE-2020-5179.md): Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to execute arbitrary OS commands by navigating to the Diagn (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.