# CVEs published 2020-01-04

4 CVEs were published on January 4, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2019-20334](https://cve.now/CVE-2019-20334.md): In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. (no CVSS)
- [CVE-2015-9540](https://cve.now/CVE-2015-9540.md): Chamilo LMS through 1.9.10.2 allows a link\_goto.php?link\_url= open redirect, a related issue to CVE-2015-5503. (no CVSS)
- [CVE-2020-5499](https://cve.now/CVE-2020-5499.md): Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. (no CVSS)
- [CVE-2020-5497](https://cve.now/CVE-2020-5497.md): The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsa (no CVSS, org.mitre:openid-connect-server)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-01-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.