# CVEs published 2020-02-13

123 CVEs were published on February 13, 2020: 0 critical, 17 high. Days are UTC.

- [CVE-2013-4791](https://cve.now/CVE-2013-4791.md): PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE. (no CVSS, prestashop/prestashop)
- [CVE-2013-4792](https://cve.now/CVE-2013-4792.md): PrestaShop before 1.4.11 allows logout CSRF. (no CVSS)
- [CVE-2013-5212](https://cve.now/CVE-2013-5212.md): Cross-site Scripting (XSS) in EasyXDM before 2.4.18 allows remote attackers to inject arbitrary web script or html via the easyxdm.swf file. (no CVSS)
- [CVE-2013-5687](https://cve.now/CVE-2013-5687.md): RiskNet Acquirer before hotfix 6.0 b7+ADHOC-443 ApplicationServiceBean contains a service information disclosure. (no CVSS)
- [CVE-2013-6277](https://cve.now/CVE-2013-6277.md): QNAP VioCard 300 has hardcoded RSA private keys. (no CVSS)
- [CVE-2013-6360](https://cve.now/CVE-2013-6360.md): TRENDnet TS-S402 has a backdoor to enable TELNET. (no CVSS)
- [CVE-2013-6362](https://cve.now/CVE-2013-6362.md): Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts. (no CVSS)
- [CVE-2013-6927](https://cve.now/CVE-2013-6927.md): Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. (no CVSS)
- [CVE-2013-7098](https://cve.now/CVE-2013-7098.md): OpenConnect VPN client with GnuTLS before 5.02 contains a heap overflow if MTU is increased on reconnection. (no CVSS)
- [CVE-2020-8858](https://cve.now/CVE-2020-8858.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Moxa MGate 5105-MB-EIP firmware version 4. (CVSS 8.8, Moxa MGate 5105-MB-EIP)
- [CVE-2020-8856](https://cve.now/CVE-2020-8856.md): This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25608. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8857](https://cve.now/CVE-2020-8857.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8853](https://cve.now/CVE-2020-8853.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8854](https://cve.now/CVE-2020-8854.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8855](https://cve.now/CVE-2020-8855.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.2947. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8851](https://cve.now/CVE-2020-8851.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8852](https://cve.now/CVE-2020-8852.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 9.7.0.29455. (CVSS 3.3, Foxit Reader)
- [CVE-2020-8849](https://cve.now/CVE-2020-8849.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8850](https://cve.now/CVE-2020-8850.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8847](https://cve.now/CVE-2020-8847.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8848](https://cve.now/CVE-2020-8848.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.0.29455. (CVSS 7.8, Foxit Reader)
- [CVE-2020-8845](https://cve.now/CVE-2020-8845.md): This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8846](https://cve.now/CVE-2020-8846.md): This vulnerability allows remote atackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-8844](https://cve.now/CVE-2020-8844.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.6.0.25114. (CVSS 7.8, Foxit Reader)
- [CVE-2013-7173](https://cve.now/CVE-2013-7173.md): Belkin n750 routers have a buffer overflow. (no CVSS)
- [CVE-2013-7287](https://cve.now/CVE-2013-7287.md): MobileIron VSP \< 5.9.1 and Sentry \< 5.0 has an insecure encryption scheme. (no CVSS)
- [CVE-2014-1617](https://cve.now/CVE-2014-1617.md): Microsys PROMOTIC 8.2.13 contains an ActiveX Control Start Buffer Overflow vulnerability which can lead to denial of service. (no CVSS)
- [CVE-2013-1634](https://cve.now/CVE-2013-1634.md): A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013- (no CVSS)
- [CVE-2013-1401](https://cve.now/CVE-2013-1401.md): Multiple security bypass vulnerabilities in the editAnswer, deleteAnswer, addAnswer, and deletePoll functions in WordPress Poll Plugin 34.5 (no CVSS)
- [CVE-2020-8988](https://cve.now/CVE-2020-8988.md): The Voatz application 2020-01-01 for Android allows only 100 million different PINs, which makes it easier for attackers (after using root a (no CVSS)
- [CVE-2020-8989](https://cve.now/CVE-2020-8989.md): In the Voatz application 2020-01-01 for Android, the amount of data transmitted during a single voter's vote depends on the different length (no CVSS)
- [CVE-2013-1400](https://cve.now/CVE-2013-1400.md): Multiple SQL injection vulnerabilities in CWPPoll.js in WordPress Poll Plugin 34.5 for WordPress allow attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2015-6589](https://cve.now/CVE-2015-6589.md): Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 be (no CVSS)
- [CVE-2019-3998](https://cve.now/CVE-2019-3998.md): Authentication bypass using an alternate path or channel in SimpliSafe SS3 firmware 1.4 allows a local, unauthenticated attacker to modify t (no CVSS, SimpliSafe SS3 Base Station)
- [CVE-2015-3309](https://cve.now/CVE-2015-3309.md): Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to read arbitrary files wi (no CVSS)
- [CVE-2014-3208](https://cve.now/CVE-2014-3208.md): A Denial of Service vulnerability exists in askpop3d 0.7.7 in free (pszQuery), (no CVSS)
- [CVE-2012-6091](https://cve.now/CVE-2012-6091.md): Zend\_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability. (no CVSS, Magento)
- [CVE-2014-3919](https://cve.now/CVE-2014-3919.md): A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspecified page, which co (no CVSS)
- [CVE-2014-4170](https://cve.now/CVE-2014-4170.md): A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.ph (no CVSS)
- [CVE-2012-5623](https://cve.now/CVE-2012-5623.md): Squirrelmail 4.0 uses the outdated MD5 hash algorithm for passwords. (no CVSS, Squirrelmail)
- [CVE-2014-4198](https://cve.now/CVE-2014-4198.md): A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of (no CVSS)
- [CVE-2019-14598](https://cve.now/CVE-2019-14598.md): Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56), versions 13.0 through 13.0.20, vers (no CVSS, Intel(R) CSME)
- [CVE-2020-0561](https://cve.now/CVE-2020-0561.md): Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privil (no CVSS, Intel(R) SGX SDK)
- [CVE-2020-0562](https://cve.now/CVE-2020-0562.md): Improper permissions in the installer for Intel(R) RWC2, all versions, may allow an authenticated user to potentially enable escalation of p (no CVSS, Intel(R) RWC2)
- [CVE-2020-0563](https://cve.now/CVE-2020-0563.md): Improper permissions in the installer for Intel(R) MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalatio (no CVSS, Intel(R) MPSS)
- [CVE-2020-0564](https://cve.now/CVE-2020-0564.md): Improper permissions in the installer for Intel(R) RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentia (no CVSS, Intel® RAID Web Console 3 (RWC3) for Windows)
- [CVE-2020-8981](https://cve.now/CVE-2020-8981.md): A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. (no CVSS)
- [CVE-2020-0560](https://cve.now/CVE-2020-0560.md): Improper permissions in the installer for the Intel(R) Renesas Electronics(R) USB 3.0 Driver, all versions, may allow an authenticated user (no CVSS, Intel(R) Renesas Electronics(R) USB 3.0 Driver)
- [CVE-2012-1903](https://cve.now/CVE-2012-1903.md): XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter. (no CVSS)
- [CVE-2012-1500](https://cve.now/CVE-2012-1500.md): Stored XSS vulnerability in UpdateFieldJson.jspa in JIRA 4.4.3 and GreenHopper before 5.9.8 allows an attacker to inject arbitrary script co (no CVSS)
- [CVE-2019-10785](https://cve.now/CVE-2019-10785.md): dojox is vulnerable to Cross-site Scripting in all versions before version 1.16.1, 1.15.2, 1.14.5, 1.13.6, 1.12.7 and 1.11.9. (no CVSS, dojox)
- [CVE-2020-3741](https://cve.now/CVE-2020-3741.md): Adobe Experience Manager versions 6.5, and 6.4 have an uncontrolled resource consumption vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2020-3759](https://cve.now/CVE-2020-3759.md): Adobe Digital Editions versions 4.5.10 and below have a buffer errors vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2020-3760](https://cve.now/CVE-2020-3760.md): Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2020-3757](https://cve.now/CVE-2020-3757.md): Adobe Flash Player versions 32.0.0.321 and earlier, 32.0.0.314 and earlier, 32.0.0.321 and earlier, and 32.0.0.255 and earlier have a type c (no CVSS, Adobe Flash Player)
- [CVE-2020-3750](https://cve.now/CVE-2020-3750.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3754](https://cve.now/CVE-2020-3754.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3752](https://cve.now/CVE-2020-3752.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3745](https://cve.now/CVE-2020-3745.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3751](https://cve.now/CVE-2020-3751.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3755](https://cve.now/CVE-2020-3755.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3753](https://cve.now/CVE-2020-3753.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3749](https://cve.now/CVE-2020-3749.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3744](https://cve.now/CVE-2020-3744.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3747](https://cve.now/CVE-2020-3747.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3746](https://cve.now/CVE-2020-3746.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3743](https://cve.now/CVE-2020-3743.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3762](https://cve.now/CVE-2020-3762.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3756](https://cve.now/CVE-2020-3756.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3763](https://cve.now/CVE-2020-3763.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-3748](https://cve.now/CVE-2020-3748.md): Adobe Acrobat and Reader versions 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 and (no CVSS, Adobe Acrobat and Reader)
- [CVE-2020-7051](https://cve.now/CVE-2020-7051.md): Codologic Codoforum through 4.8.4 allows stored XSS in the login area. (no CVSS)
- [CVE-2019-4666](https://cve.now/CVE-2019-4666.md): IBM UrbanCode Deploy (UCD) 7.0.3 and IBM UrbanCode Build 6.1.5 could allow a local user to obtain sensitive information by unmasking certain (CVSS 2.3, IBM UrbanCode Deploy · IBM UrbanCode Build)
- [CVE-2019-4592](https://cve.now/CVE-2019-4592.md): IBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the IT (CVSS 7.5, IBM Tivoli Monitoring)
- [CVE-2020-8614](https://cve.now/CVE-2020-8614.md): An issue was discovered on Askey AP4000W TDC\_V1.01.003 devices. (no CVSS)
- [CVE-2020-8804](https://cve.now/CVE-2020-8804.md): SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module. (no CVSS)
- [CVE-2020-8803](https://cve.now/CVE-2020-8803.md): SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add\_to\_prospect\_list. (no CVSS)
- [CVE-2020-8802](https://cve.now/CVE-2020-8802.md): SuiteCRM through 7.11.11 has Incorrect Access Control via action\_saveHTMLField Bean Manipulation. (no CVSS)
- [CVE-2020-8801](https://cve.now/CVE-2020-8801.md): SuiteCRM through 7.11.11 allows PHAR Deserialization. (no CVSS)
- [CVE-2020-8800](https://cve.now/CVE-2020-8800.md): SuiteCRM through 7.11.11 allows EmailsControllerActionGetFromFields PHP Object Injection. (no CVSS)
- [CVE-2020-3742](https://cve.now/CVE-2020-3742.md): Adobe Acrobat and Reader versions, 2019.021.20061 and earlier, 2017.011.30156 and earlier, 2017.011.30156 and earlier, and 2015.006.30508 an (no CVSS, Adobe Acrobat and Reader)
- [CVE-2019-18791](https://cve.now/CVE-2019-18791.md): Lexmark printer MS812 and multiple older generation Lexmark devices have a stored XSS vulnerability in the embedded web server. (no CVSS)
- [CVE-2020-3737](https://cve.now/CVE-2020-3737.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3724](https://cve.now/CVE-2020-3724.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3726](https://cve.now/CVE-2020-3726.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3722](https://cve.now/CVE-2020-3722.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3725](https://cve.now/CVE-2020-3725.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3727](https://cve.now/CVE-2020-3727.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3723](https://cve.now/CVE-2020-3723.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3740](https://cve.now/CVE-2020-3740.md): Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3732](https://cve.now/CVE-2020-3732.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3729](https://cve.now/CVE-2020-3729.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3730](https://cve.now/CVE-2020-3730.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3731](https://cve.now/CVE-2020-3731.md): Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3728](https://cve.now/CVE-2020-3728.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3733](https://cve.now/CVE-2020-3733.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3736](https://cve.now/CVE-2020-3736.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3738](https://cve.now/CVE-2020-3738.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3739](https://cve.now/CVE-2020-3739.md): Adobe Framemaker versions 2019.0.4 and below have a memory corruption vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3735](https://cve.now/CVE-2020-3735.md): Adobe Framemaker versions 2019.0.4 and below have a heap overflow vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3721](https://cve.now/CVE-2020-3721.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3734](https://cve.now/CVE-2020-3734.md): Adobe Framemaker versions 2019.0.4 and below have a buffer error vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-3720](https://cve.now/CVE-2020-3720.md): Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2020-0030](https://cve.now/CVE-2020-0030.md): In binder\_thread\_release of binder.c, there is a possible use after free due to a race condition. (no CVSS, Android)
- [CVE-2020-0028](https://cve.now/CVE-2020-0028.md): In notifyNetworkTested and related functions of NetworkMonitor.java, there is a possible bypass of private DNS settings. (no CVSS, Android)
- [CVE-2020-0027](https://cve.now/CVE-2020-0027.md): In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. (no CVSS, Android)
- [CVE-2020-0026](https://cve.now/CVE-2020-0026.md): In Parcel::continueWrite of Parcel.cpp, there is possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2020-0005](https://cve.now/CVE-2020-0005.md): In btm\_read\_remote\_ext\_features\_complete of btm\_acl.cc, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0023](https://cve.now/CVE-2020-0023.md): In setPhonebookAccessPermission of AdapterService.java, there is a possible disclosure of user contacts over bluetooth due to a missing perm (no CVSS, Android)
- [CVE-2020-0022](https://cve.now/CVE-2020-0022.md): In reassemble\_and\_dispatch of packet\_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. (CVSS 8.8, Android)
- [CVE-2020-0021](https://cve.now/CVE-2020-0021.md): In removeUnusedPackagesLPw of PackageManagerService.java, there is a possible permanent denial-of-service due to a missing package dependenc (no CVSS, Android)
- [CVE-2020-0020](https://cve.now/CVE-2020-0020.md): In getAttributeRange of ExifInterface.java, there is a possible failure to redact location information from media files due to an incorrect (no CVSS, Android)
- [CVE-2020-0018](https://cve.now/CVE-2020-0018.md): In MotionEntry::appendDescription of InputDispatcher.cpp, there is a possible log information disclosure. (no CVSS, Android)
- [CVE-2020-0017](https://cve.now/CVE-2020-0017.md): In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. (no CVSS, Android)
- [CVE-2019-2200](https://cve.now/CVE-2019-2200.md): In updatePermissions of PermissionManagerService.java, it may be possible for a malicious app to obtain a custom permission from another app (no CVSS, Android)
- [CVE-2020-0015](https://cve.now/CVE-2020-0015.md): In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. (no CVSS, Android)
- [CVE-2020-0014](https://cve.now/CVE-2020-0014.md): It is possible for a malicious application to construct a TYPE\_TOAST window manually and make that window clickable. (no CVSS, Android)
- [CVE-2019-14652](https://cve.now/CVE-2019-14652.md): explorer.js in Amazon AWS JavaScript S3 Explorer (aka aws-js-s3-explorer) v2 alpha before 2019-08-02 allows XSS in certain circumstances. (no CVSS)
- [CVE-2020-8962](https://cve.now/CVE-2020-8962.md): A stack-based buffer overflow was found on the D-Link DIR-842 REVC with firmware v3.13B09 HOTFIX due to the use of strcpy for LOGINPASSWORD (no CVSS)
- [CVE-2020-8953](https://cve.now/CVE-2020-8953.md): OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication). (no CVSS)
- [CVE-2020-8963](https://cve.now/CVE-2020-8963.md): TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 (no CVSS)
- [CVE-2020-8964](https://cve.now/CVE-2020-8964.md): TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 (no CVSS)
- [CVE-2020-5239](https://cve.now/CVE-2020-5239.md): Unspecified vulnerability in the fetchmail script in Mailu (CVSS 8.7, Mailu)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-02-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.