# CVEs published 2020-02-16 7 CVEs were published on February 16, 2020: 0 critical, 0 high. Days are UTC. - [CVE-2020-9016](https://cve.now/CVE-2020-9016.md): Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header. (no CVSS, dolibarr/dolibarr) - [CVE-2020-9013](https://cve.now/CVE-2020-9013.md): Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting \
from the HTML source code. (no CVSS) - [CVE-2020-9012](https://cve.now/CVE-2020-9012.md): A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to (no CVSS) - [CVE-2020-9007](https://cve.now/CVE-2020-9007.md): Codoforum 4.8.8 allows self-XSS via the title of a new topic. (no CVSS) - [CVE-2019-20456](https://cve.now/CVE-2019-20456.md): Goverlan Reach Console before 9.50, Goverlan Reach Server before 3.50, and Goverlan Client Agent before 9.20.50 have an Untrusted Search Pat (no CVSS) - [CVE-2020-8997](https://cve.now/CVE-2020-8997.md): Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specifi (no CVSS) - [CVE-2020-8996](https://cve.now/CVE-2020-8996.md): AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/ (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2020-02-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.