CVEs published January 4, 2020
4 CVEs were published on January 4, 2020: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- org.mitre:openid-connect-server
- 1
Medium, low and unrated 4
- CVE-2019-20334In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c.
- CVE-2015-9540Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503.
- CVE-2020-5499Baidu Rust SGX SDK through 1.0.8 has an enclave ID race.
- CVE-2020-5497The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsaorg.mitre:openid-connect-server