# CVEs published 2020-04-12

17 CVEs were published on April 12, 2020: 0 critical, 1 high. Days are UTC.

- [CVE-2020-11725](https://cve.now/CVE-2020-11725.md): snd\_ctl\_elem\_add in sound/core/control.c in the Linux kernel through 5.6.3 has a count=info-\>owner line, which later affects a private\_size\* (CVSS 7.8)
- [CVE-2020-11724](https://cve.now/CVE-2020-11724.md): An issue was discovered in OpenResty before 1.15.8.4. (no CVSS)
- [CVE-2020-11722](https://cve.now/CVE-2020-11722.md): Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an u (no CVSS)
- [CVE-2020-11721](https://cve.now/CVE-2020-11721.md): load\_png in loader.c in libsixel.a in libsixel 1.8.6 has an uninitialized pointer leading to an invalid call to free, which can cause a deni (no CVSS)
- [CVE-2020-11714](https://cve.now/CVE-2020-11714.md): eten PSG-6528VM 1.1 devices allow XSS via System Contact or System Location. (no CVSS)
- [CVE-2020-11713](https://cve.now/CVE-2020-11713.md): wolfSSL 4.3.0 has mulmod code in wc\_ecc\_mulmod\_ex in ecc.c that does not properly resist timing side-channel attacks. (no CVSS)
- [CVE-2020-11712](https://cve.now/CVE-2020-11712.md): Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field. (no CVSS)
- [CVE-2020-11710](https://cve.now/CVE-2020-11710.md): An issue was discovered in docker-kong (for Kong) through 2.0.3. (no CVSS)
- [CVE-2020-11709](https://cve.now/CVE-2020-11709.md): cpp-httplib through 0.5.8 does not filter \\r\\n in parameters passed into the set\_redirect and set\_header functions, which creates possibilit (no CVSS)
- [CVE-2020-11701](https://cve.now/CVE-2020-11701.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11702](https://cve.now/CVE-2020-11702.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11703](https://cve.now/CVE-2020-11703.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11704](https://cve.now/CVE-2020-11704.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11705](https://cve.now/CVE-2020-11705.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11706](https://cve.now/CVE-2020-11706.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11707](https://cve.now/CVE-2020-11707.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)
- [CVE-2020-11708](https://cve.now/CVE-2020-11708.md): An issue was discovered in ProVide (formerly zFTPServer) through 13.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.