# CVEs published 2020-08-13

112 CVEs were published on August 13, 2020: 1 critical, 5 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2019-20383](https://cve.now/CVE-2019-20383.md): ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via (no CVSS)
- [CVE-2020-7360](https://cve.now/CVE-2020-7360.md): Philips SmartControl DLL Hijacking (CVSS 7.4, Philips SmartControl)
- [CVE-2020-24342](https://cve.now/CVE-2020-24342.md): Lua through 5.4.0 allows a stack redzone cross in luaO\_pushvfstring because a protection mechanism wrongly calls luaD\_callnoyield twice in a (no CVSS)
- [CVE-2020-24343](https://cve.now/CVE-2020-24343.md): Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c. (no CVSS)
- [CVE-2020-24344](https://cve.now/CVE-2020-24344.md): JerryScript through 2.3.0 has a (function({a=arguments}){const arguments}) buffer over-read. (no CVSS)
- [CVE-2020-24345](https://cve.now/CVE-2020-24345.md): JerryScript through 2.3.0 allows stack consumption via function a(){new new Proxy(a,{})}JSON.parse("\[\]",a). (no CVSS)
- [CVE-2020-24346](https://cve.now/CVE-2020-24346.md): njs through 0.4.3, used in NGINX, has a use-after-free in njs\_json\_parse\_iterator\_call in njs\_json.c. (no CVSS)
- [CVE-2020-24347](https://cve.now/CVE-2020-24347.md): njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs\_lvlhsh\_level\_find in njs\_lvlhsh.c. (no CVSS)
- [CVE-2020-24348](https://cve.now/CVE-2020-24348.md): njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs\_json\_stringify\_iterator in njs\_json.c. (no CVSS)
- [CVE-2020-24349](https://cve.now/CVE-2020-24349.md): njs through 0.4.3, used in NGINX, allows control-flow hijack in njs\_value\_property in njs\_value.c. (no CVSS)
- [CVE-2020-24330](https://cve.now/CVE-2020-24330.md): An issue was discovered in TrouSerS through 0.3.14. (no CVSS)
- [CVE-2020-24331](https://cve.now/CVE-2020-24331.md): An issue was discovered in TrouSerS through 0.3.14. (no CVSS)
- [CVE-2020-24332](https://cve.now/CVE-2020-24332.md): An issue was discovered in TrouSerS through 0.3.14. (no CVSS)
- [CVE-2020-17498](https://cve.now/CVE-2020-17498.md): In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. (no CVSS)
- [CVE-2020-0261](https://cve.now/CVE-2020-0261.md): In C2 flame devices, there is a possible bypass of seccomp due to a missing configuration file. (no CVSS, Android)
- [CVE-2020-14483](https://cve.now/CVE-2020-14483.md): A timeout during a TLS handshake can result in the connection failing to terminate. (no CVSS, Niagara)
- [CVE-2020-15947](https://cve.now/CVE-2020-15947.md): A SQL injection vulnerability in the qm\_adm/qm\_export\_stats\_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticate (no CVSS)
- [CVE-2020-11733](https://cve.now/CVE-2020-11733.md): An issue was discovered on Spirent TestCenter and Avalanche appliance admin interface firmware. (no CVSS)
- [CVE-2020-15925](https://cve.now/CVE-2020-15925.md): A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary (no CVSS)
- [CVE-2020-13286](https://cve.now/CVE-2020-13286.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forger (CVSS 6.4, GitLab)
- [CVE-2020-13281](https://cve.now/CVE-2020-13281.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature (CVSS 6.5, GitLab)
- [CVE-2020-13280](https://cve.now/CVE-2020-13280.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. (CVSS 6.5, GitLab)
- [CVE-2020-13285](https://cve.now/CVE-2020-13285.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. (CVSS 7.3, GitLab)
- [CVE-2020-13283](https://cve.now/CVE-2020-13283.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. (CVSS 7.3, GitLab)
- [CVE-2020-13282](https://cve.now/CVE-2020-13282.md): For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup (CVSS 3.1, GitLab)
- [CVE-2019-16374](https://cve.now/CVE-2019-16374.md): Pega Platform 8.2.1 allows LDAP injection because a username can contain a \* character and can be of unlimited length. (no CVSS)
- [CVE-2020-17463](https://cve.now/CVE-2020-17463.md): FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items. (CVSS 9.8, KEV)
- [CVE-2020-16087](https://cve.now/CVE-2020-16087.md): An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. (no CVSS)
- [CVE-2020-4589](https://cve.now/CVE-2020-4589.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a special (CVSS 8.1, IBM WebSphere Application Server)
- [CVE-2019-4582](https://cve.now/CVE-2019-4582.md): IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system. (CVSS 4.3, IBM Maximo Asset Management)
- [CVE-2019-14620](https://cve.now/CVE-2019-14620.md): Insufficient control flow management for some Intel(R) Wireless Bluetooth(R) products may allow an unprivileged user to potentially enable d (no CVSS, Intel(R) Wireless Bluetooth(R) Advisory)
- [CVE-2020-0553](https://cve.now/CVE-2020-0553.md): Out-of-bounds read in kernel mode driver for some Intel(R) Wireless Bluetooth(R) products on Windows\* 10, may allow a privileged user to pot (no CVSS, Intel(R) Wireless Bluetooth(R) Advisory)
- [CVE-2020-0555](https://cve.now/CVE-2020-0555.md): Improper input validation for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable escalation (no CVSS, Intel(R) Wireless Bluetooth(R) Advisory)
- [CVE-2020-0554](https://cve.now/CVE-2020-0554.md): Race condition in software installer for some Intel(R) Wireless Bluetooth(R) products on Windows\* 7, 8.1 and 10 may allow an unprivileged us (no CVSS, Intel(R) Wireless Bluetooth(R) Advisory)
- [CVE-2020-0559](https://cve.now/CVE-2020-0559.md): Insecure inherited permissions in some Intel(R) PROSet/Wireless WiFi products on Windows\* 7 and 8.1 before version 21.40.5.1 may allow an au (no CVSS, Intel(R) PROSet/Wireless WiFi Advisory)
- [CVE-2020-12299](https://cve.now/CVE-2020-12299.md): Improper input validation in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to po (no CVSS, Intel(R) Server Board Families Advisory)
- [CVE-2020-12301](https://cve.now/CVE-2020-12301.md): Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to pote (no CVSS, Intel(R) Server Board Families Advisory)
- [CVE-2020-12300](https://cve.now/CVE-2020-12300.md): Uninitialized pointer in BIOS firmware for Intel(R) Server Board Families S2600CW, S2600KP, S2600TP, and S2600WT may allow a privileged user (no CVSS, Intel(R) Server Board Families Advisory)
- [CVE-2020-8683](https://cve.now/CVE-2020-8683.md): Improper buffer restrictions in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated use (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-8682](https://cve.now/CVE-2020-8682.md): Out of bounds read in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to poten (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-0512](https://cve.now/CVE-2020-0512.md): Uncaught exception in the system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to p (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-8679](https://cve.now/CVE-2020-8679.md): Out-of-bounds write in Kernel Mode Driver for some Intel(R) Graphics Drivers before version 26.20.100.7755 may allow an authenticated user t (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-7307](https://cve.now/CVE-2020-7307.md): DLP for Mac - Unprotected Storage of Credentials (CVSS 5.2, McAfee Data Loss Prevention)
- [CVE-2020-8680](https://cve.now/CVE-2020-8680.md): Race condition in some Intel(R) Graphics Drivers before version 15.40.45.5126 may allow an authenticated user to potentially enable escalati (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-8681](https://cve.now/CVE-2020-8681.md): Out of bounds write in system driver for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to pote (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-0513](https://cve.now/CVE-2020-0513.md): Out of bounds write for some Intel(R) Graphics Drivers before version 15.33.50.5129 may allow an authenticated user to potentially enable es (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-0510](https://cve.now/CVE-2020-0510.md): Out of bounds read in some Intel(R) Graphics Drivers before versions 15.45.31.5127 and 15.40.45.5126 may allow an authenticated user to pote (no CVSS, Intel(R) Graphics Drivers Advisory)
- [CVE-2020-8684](https://cve.now/CVE-2020-8684.md): Improper access control in firmware for Intel(R) PAC with Arria(R) 10 GX FPGA before Intel Acceleration Stack version 1.2.1 may allow a priv (no CVSS, Intel(R) PAC with Arria(R) 10 GX FPGA Advisory)
- [CVE-2020-8685](https://cve.now/CVE-2020-8685.md): Improper authentication in subsystem for Intel (R) LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable (no CVSS, Intel (R) LED Manager for NUC Advisory)
- [CVE-2020-8687](https://cve.now/CVE-2020-8687.md): Uncontrolled search path in the installer for Intel(R) RSTe Software RAID Driver for the Intel(R) Server Board M10JNP2SB before version 4.7. (no CVSS, Intel(R) RSTe Software RAID Driver for the Intel(R) Server…)
- [CVE-2020-8688](https://cve.now/CVE-2020-8688.md): Improper input validation in the Intel(R) RAID Web Console 3 for Windows\* may allow an unauthenticated user to potentially enable denial of (no CVSS, Intel(R) RAID Web Console 3 for Windows\* Advisory)
- [CVE-2020-8689](https://cve.now/CVE-2020-8689.md): Improper buffer restrictions in the Intel(R) Wireless for Open Source before version 1.5 may allow an unauthenticated user to potentially en (no CVSS, Intel(R) Wireless for Open Source Advisory)
- [CVE-2020-8720](https://cve.now/CVE-2020-8720.md): Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privilege (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-7306](https://cve.now/CVE-2020-7306.md): DLP for Mac - Unprotected Storage of Credentials (CVSS 5.2, McAfee Data Loss Prevention)
- [CVE-2020-7305](https://cve.now/CVE-2020-7305.md): DLP ePO extension - Privilege escalation (CVSS 6.7, McAfee DLP ePO extension)
- [CVE-2020-8717](https://cve.now/CVE-2020-8717.md): Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an a (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-7304](https://cve.now/CVE-2020-7304.md): DLP ePO extension - Cross-site request forgery (CVSS 7.6, McAfee DLP ePO extension)
- [CVE-2020-8714](https://cve.now/CVE-2020-8714.md): Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated u (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8716](https://cve.now/CVE-2020-8716.md): Improper access control for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated u (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8715](https://cve.now/CVE-2020-8715.md): Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8729](https://cve.now/CVE-2020-8729.md): Buffer copy without checking size of input for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8706](https://cve.now/CVE-2020-8706.md): Buffer overflow in a daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthentic (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-7303](https://cve.now/CVE-2020-7303.md): DLP ePO extension - Cross-site scripting (CVSS 4.1, McAfee DLP ePO extension)
- [CVE-2020-8713](https://cve.now/CVE-2020-8713.md): Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8723](https://cve.now/CVE-2020-8723.md): Cross-site scripting for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated us (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8709](https://cve.now/CVE-2020-8709.md): Improper authentication in socket services for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8732](https://cve.now/CVE-2020-8732.md): Heap-based buffer overflow in the firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8722](https://cve.now/CVE-2020-8722.md): Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privilege (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-7302](https://cve.now/CVE-2020-7302.md): DLP ePO extension - Unrestricted Upload of File with Dangerous Type (CVSS 5.4, McAfee DLP ePO extension)
- [CVE-2020-8718](https://cve.now/CVE-2020-8718.md): Buffer overflow in a subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenti (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8712](https://cve.now/CVE-2020-8712.md): Buffer overflow in a verification process for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8711](https://cve.now/CVE-2020-8711.md): Improper access control in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8710](https://cve.now/CVE-2020-8710.md): Buffer overflow in the bootloader for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.45 may allow a privil (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8721](https://cve.now/CVE-2020-8721.md): Improper input validation for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged use (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8719](https://cve.now/CVE-2020-8719.md): Buffer overflow in subsystem for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow a privileged (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8707](https://cve.now/CVE-2020-8707.md): Buffer overflow in daemon for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticat (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8731](https://cve.now/CVE-2020-8731.md): Incorrect execution-assigned permissions in the file system for some Intel(R) Server Boards, Server Systems and Compute Modules before versi (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8730](https://cve.now/CVE-2020-8730.md): Heap-based overflow for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8708](https://cve.now/CVE-2020-8708.md): Improper authentication for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated (no CVSS, Intel(R) Server Boards, Server Systems and Compute Modules…)
- [CVE-2020-8733](https://cve.now/CVE-2020-8733.md): Improper buffer restrictions in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potenti (no CVSS, Intel(R) Server Board M10JNP2SB Advisory)
- [CVE-2020-8736](https://cve.now/CVE-2020-8736.md): Improper access control in subsystem for the Intel(R) Computing Improvement Program before version 2.4.5718 may allow an authenticated user (no CVSS, Intel(R) Computing Improvement Program Advisory)
- [CVE-2020-8742](https://cve.now/CVE-2020-8742.md): Improper input validation in the firmware for Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via lo (no CVSS, Intel(R) NUCs Advisory)
- [CVE-2020-8743](https://cve.now/CVE-2020-8743.md): Improper permissions in the installer for the Intel(R) Mailbox Interface driver, all versions, may allow an authenticated user to potentiall (no CVSS, Intel(R) Mailbox Interface driver Advisory)
- [CVE-2020-8763](https://cve.now/CVE-2020-8763.md): Improper permissions in the installer for the Intel(R) RealSense(TM) D400 Series UWP driver for Windows\* 10 may allow an authenticated user (no CVSS, Intel(R) RealSense(TM) D400 Series Advisory)
- [CVE-2020-12287](https://cve.now/CVE-2020-12287.md): Incorrect permissions in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2020.2 may allow an authenticated user to potentia (no CVSS, Intel(R) Distribution of OpenVINO(TM) Toolkit Advisory)
- [CVE-2020-17538](https://cve.now/CVE-2020-17538.md): A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows a (no CVSS)
- [CVE-2020-16310](https://cve.now/CVE-2020-16310.md): A division by zero vulnerability in dot24\_print\_page() in devices/gdevdm24.c of Artifex Software GhostScript v9.50 allows a remote attacker (no CVSS)
- [CVE-2020-16309](https://cve.now/CVE-2020-16309.md): A buffer overflow vulnerability in lxm5700m\_print\_page() in devices/gdevlxm.c of Artifex Software GhostScript v9.50 allows a remote attacker (no CVSS)
- [CVE-2020-16308](https://cve.now/CVE-2020-16308.md): A buffer overflow vulnerability in p\_print\_image() in devices/gdevcdj.c of Artifex Software GhostScript v9.50 allows a remote attacker to ca (no CVSS)
- [CVE-2020-16307](https://cve.now/CVE-2020-16307.md): A null pointer dereference vulnerability in devices/vector/gdevtxtw.c and psi/zbfont.c of Artifex Software GhostScript v9.50 allows a remote (no CVSS)
- [CVE-2020-8759](https://cve.now/CVE-2020-8759.md): Improper access control in the installer for Intel(R) SSD DCT versions before 3.0.23 may allow a privileged user to potentially enable escal (no CVSS, Intel(R) SSD DCT Advisory)
- [CVE-2020-16306](https://cve.now/CVE-2020-16306.md): A null pointer dereference vulnerability in devices/gdevtsep.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a den (no CVSS)
- [CVE-2020-16305](https://cve.now/CVE-2020-16305.md): A buffer overflow vulnerability in pcx\_write\_rle() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote attac (no CVSS)
- [CVE-2020-16304](https://cve.now/CVE-2020-16304.md): A buffer overflow vulnerability in image\_render\_color\_thresh() in base/gxicolor.c of Artifex Software GhostScript v9.18 to v9.50 allows a re (no CVSS)
- [CVE-2020-16303](https://cve.now/CVE-2020-16303.md): A use-after-free vulnerability in xps\_finish\_image\_path() in devices/vector/gdevxps.c of Artifex Software GhostScript v9.50 allows a remote (no CVSS)
- [CVE-2020-16302](https://cve.now/CVE-2020-16302.md): A buffer overflow vulnerability in jetp3852\_print\_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacke (no CVSS)
- [CVE-2020-16301](https://cve.now/CVE-2020-16301.md): A buffer overflow vulnerability in okiibm\_print\_page1() in devices/gdevokii.c of Artifex Software GhostScript v9.50 allows a remote attacker (no CVSS)
- [CVE-2020-16300](https://cve.now/CVE-2020-16300.md): A buffer overflow vulnerability in tiff12\_print\_page() in devices/gdevtfnx.c of Artifex Software GhostScript v9.50 allows a remote attacker (no CVSS)
- [CVE-2020-16299](https://cve.now/CVE-2020-16299.md): A Division by Zero vulnerability in bj10v\_print\_page() in contrib/japanese/gdev10v.c of Artifex Software GhostScript v9.50 allows a remote a (no CVSS)
- [CVE-2020-16298](https://cve.now/CVE-2020-16298.md): A buffer overflow vulnerability in mj\_color\_correct() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote at (no CVSS)
- [CVE-2020-16297](https://cve.now/CVE-2020-16297.md): A buffer overflow vulnerability in FloydSteinbergDitheringC() in contrib/gdevbjca.c of Artifex Software GhostScript v9.18 to v9.50 allows a (no CVSS)
- [CVE-2019-14630](https://cve.now/CVE-2019-14630.md): Reliance on untrusted inputs in a security decision in some Intel(R) Thunderbolt(TM) controllers may allow unauthenticated user to potential (no CVSS, Intel(R) Thunderbolt(TM) Controller Advisory)
- [CVE-2020-16296](https://cve.now/CVE-2020-16296.md): A buffer overflow vulnerability in GetNumWrongData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript from v9.18 to v9.50 allows (no CVSS)
- [CVE-2020-16295](https://cve.now/CVE-2020-16295.md): A null pointer dereference vulnerability in clj\_media\_size() in devices/gdevclj.c of Artifex Software GhostScript v9.50 allows a remote atta (no CVSS)
- [CVE-2020-16294](https://cve.now/CVE-2020-16294.md): A buffer overflow vulnerability in epsc\_print\_page() in devices/gdevepsc.c of Artifex Software GhostScript v9.50 allows a remote attacker to (no CVSS)
- [CVE-2020-16293](https://cve.now/CVE-2020-16293.md): A null pointer dereference vulnerability in compose\_group\_nonknockout\_nonblend\_isolated\_allmask\_common() in base/gxblend.c of Artifex Softwa (no CVSS)
- [CVE-2020-16292](https://cve.now/CVE-2020-16292.md): A buffer overflow vulnerability in mj\_raster\_cmd() in contrib/japanese/gdevmjc.c of Artifex Software GhostScript v9.50 allows a remote attac (no CVSS)
- [CVE-2020-16291](https://cve.now/CVE-2020-16291.md): A buffer overflow vulnerability in contrib/gdevdj9.c of Artifex Software GhostScript v9.18 to v9.50 allows a remote attacker to cause a deni (no CVSS)
- [CVE-2020-16290](https://cve.now/CVE-2020-16290.md): A buffer overflow vulnerability in jetp3852\_print\_page() in devices/gdev3852.c of Artifex Software GhostScript v9.50 allows a remote attacke (no CVSS)
- [CVE-2020-16289](https://cve.now/CVE-2020-16289.md): A buffer overflow vulnerability in cif\_print\_page() in devices/gdevcif.c of Artifex Software GhostScript v9.50 allows a remote attacker to c (no CVSS)
- [CVE-2020-16288](https://cve.now/CVE-2020-16288.md): A buffer overflow vulnerability in pj\_common\_print\_page() in devices/gdevpjet.c of Artifex Software GhostScript v9.50 allows a remote attack (no CVSS)
- [CVE-2020-16287](https://cve.now/CVE-2020-16287.md): A buffer overflow vulnerability in lprn\_is\_black() in contrib/lips4/gdevlprn.c of Artifex Software GhostScript v9.50 allows a remote attacke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.