# CVEs published 2020-09-16

82 CVEs were published on September 16, 2020: 0 critical, 2 high. Days are UTC.

- [CVE-2020-24377](https://cve.now/CVE-2020-24377.md): A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3. (no CVSS)
- [CVE-2020-24376](https://cve.now/CVE-2020-24376.md): A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3. (no CVSS)
- [CVE-2020-24373](https://cve.now/CVE-2020-24373.md): A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. (no CVSS)
- [CVE-2020-24374](https://cve.now/CVE-2020-24374.md): A DNS rebinding vulnerability in Freebox v5 before 1.5.29. (no CVSS)
- [CVE-2020-20406](https://cve.now/CVE-2020-20406.md): A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions (no CVSS)
- [CVE-2020-16233](https://cve.now/CVE-2020-16233.md): An attacker could send a specially crafted packet that could have CodeMeter (All versions prior to 7.10) send back packets containing data f (no CVSS, CodeMeter)
- [CVE-2020-14513](https://cve.now/CVE-2020-14513.md): CodeMeter (All versions prior to 6.81) and the software using it may crash while processing a specifically crafted license file due to unver (no CVSS, CodeMeter)
- [CVE-2020-14515](https://cve.now/CVE-2020-14515.md): CodeMeter (All versions prior to 6.90 when using CmActLicense update files with CmActLicense Firm Code) has an issue in the license-file sig (no CVSS, CodeMeter)
- [CVE-2020-14519](https://cve.now/CVE-2020-14519.md): This vulnerability allows an attacker to use the internal WebSockets API for CodeMeter (All versions prior to 7.00 are affected, including V (no CVSS, CodeMeter)
- [CVE-2020-14517](https://cve.now/CVE-2020-14517.md): Protocol encryption can be easily broken for CodeMeter (All versions prior to 6.90 are affected, including Version 6.90 or newer only if Cod (no CVSS, CodeMeter)
- [CVE-2020-14509](https://cve.now/CVE-2020-14509.md): Multiple memory corruption vulnerabilities exist in CodeMeter (All versions prior to 7.10) where the packet parser mechanism does not verify (no CVSS, CodeMeter)
- [CVE-2020-6146](https://cve.now/CVE-2020-6146.md): An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. (CVSS 8.8, Nitro Pro)
- [CVE-2020-13259](https://cve.now/CVE-2020-13259.md): A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF\_0290\_2.3.01.26 could allow an unauthenticated, remote at (no CVSS)
- [CVE-2020-6781](https://cve.now/CVE-2020-6781.md): Improper Certificate Validation in Bosch Smart Home System App for iOS (CVSS 6.8, Bosch Smart Home)
- [CVE-2020-10718](https://cve.now/CVE-2020-10718.md): A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Threa (no CVSS, Wildfly)
- [CVE-2020-1694](https://cve.now/CVE-2020-1694.md): A flaw was found in all versions of Keycloak before 10.0.0, where the NodeJS adapter did not support the verify-token-audience. (no CVSS, keycloak · org.keycloak:keycloak-parent)
- [CVE-2020-10715](https://cve.now/CVE-2020-10715.md): A content spoofing vulnerability was found in the openshift/console 3.11 and 4.x. (no CVSS, openshift/console)
- [CVE-2020-10748](https://cve.now/CVE-2020-10748.md): A flaw was found in Keycloak's data filter, in version 10.0.1, where it allowed the processing of data URLs in some circumstances. (no CVSS, keycloak · org.keycloak:keycloak-parent)
- [CVE-2020-25040](https://cve.now/CVE-2020-25040.md): Sylabs Singularity through 3.6.2 has Insecure Permissions on temporary directories used in explicit and implicit container build operations, (no CVSS, github.com/sylabs/singularity)
- [CVE-2020-14348](https://cve.now/CVE-2020-14348.md): It was found in AMQ Online before 1.5.2 that injecting an invalid field to a user's AddressSpace configuration of the user namespace puts AM (no CVSS, AMQ)
- [CVE-2020-25039](https://cve.now/CVE-2020-25039.md): Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execut (no CVSS, github.com/sylabs/singularity)
- [CVE-2020-13928](https://cve.now/CVE-2020-13928.md): Apache Atlas before 2.1.0 contain a XSS vulnerability. (no CVSS, Apache Atlas · org.apache.atlas:apache-atlas)
- [CVE-2020-25015](https://cve.now/CVE-2020-25015.md): A specific router allows changing the Wi-Fi password remotely. (no CVSS)
- [CVE-2020-3990](https://cve.now/CVE-2020-3990.md): VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an intege (no CVSS, VMware Workstation and Horizon Client for Windows)
- [CVE-2020-3989](https://cve.now/CVE-2020-3989.md): VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bound (no CVSS, VMware Workstation and Horizon Client for Windows)
- [CVE-2020-3988](https://cve.now/CVE-2020-3988.md): VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint (no CVSS, VMware Workstation and Horizon Client for Windows)
- [CVE-2020-3987](https://cve.now/CVE-2020-3987.md): VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint (no CVSS, VMware Workstation and Horizon Client for Windows)
- [CVE-2020-3986](https://cve.now/CVE-2020-3986.md): VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint (no CVSS, VMware Workstation and Horizon Client for Windows)
- [CVE-2020-3980](https://cve.now/CVE-2020-3980.md): VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. (no CVSS, VMware Fusion)
- [CVE-2014-10402](https://cve.now/CVE-2014-10402.md): An issue was discovered in the DBI module through 1.643 for Perl. (no CVSS)
- [CVE-2020-4708](https://cve.now/CVE-2020-4708.md): IBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a wildcard in the Access-Control-Allow-Origin head (CVSS 3.7, IBM Security Trusteer Pinpoint Detect)
- [CVE-2020-4409](https://cve.now/CVE-2020-4409.md): IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbing attack. (CVSS 6.8, IBM Maximo Asset Management)
- [CVE-2020-7532](https://cve.now/CVE-2020-7532.md): A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack x70 Security Administrator (V1.2.0 and prior) which could allo (no CVSS, SCADAPack x70 Security Administrator V1.2.0 and prior.)
- [CVE-2020-7531](https://cve.now/CVE-2020-7531.md): A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to pla (no CVSS, SCADAPack 7x Remote Connect V3.6.3.574 and prior.)
- [CVE-2020-7530](https://cve.now/CVE-2020-7530.md): A CWE-285 Improper Authorization vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows improper access to (no CVSS, SCADAPack 7x Remote Connect V3.6.3.574 and prior.)
- [CVE-2020-7529](https://cve.now/CVE-2020-7529.md): A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connec (no CVSS, SCADAPack 7x Remote Connect V3.6.3.574 and prior.)
- [CVE-2020-7528](https://cve.now/CVE-2020-7528.md): A CWE-502 Deserialization of Untrusted Data vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which could allow arb (no CVSS, SCADAPack 7x Remote Connect V3.6.3.574 and prior.)
- [CVE-2020-1748](https://cve.now/CVE-2020-1748.md): A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were byp (no CVSS, Wildfly · org.wildfly.security:wildfly-elytron)
- [CVE-2020-10758](https://cve.now/CVE-2020-10758.md): A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified (no CVSS, Keycloak · org.keycloak:keycloak-parent)
- [CVE-2020-10733](https://cve.now/CVE-2020-10733.md): The Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not have fully-qualified paths. (no CVSS, PostgreSQL)
- [CVE-2020-24889](https://cve.now/CVE-2020-24889.md): A buffer overflow vulnerability in LibRaw version \< 20.0 LibRaw::GetNormalizedModel in src/metadata/normalize\_model.cpp may lead to context- (no CVSS)
- [CVE-2020-25614](https://cve.now/CVE-2020-25614.md): xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (no CVSS, github.com/antchfx/xmlquery)
- [CVE-2020-24890](https://cve.now/CVE-2020-24890.md): libraw 20.0 has a null pointer dereference vulnerability in parse\_tiff\_ifd in src/metadata/tiff.cpp, which may result in context-dependent a (no CVSS)
- [CVE-2020-14382](https://cve.now/CVE-2020-14382.md): A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is effectively inv (no CVSS, cryptsetup)
- [CVE-2020-1710](https://cve.now/CVE-2020-1710.md): The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230\[1\] as it returns a 200 instead of a 400 (no CVSS, JBoss Enterprise Application Platform)
- [CVE-2020-7733](https://cve.now/CVE-2020-7733.md): Regular Expression Denial of Service (ReDoS) (CVSS 7.5, ua-parser-js)
- [CVE-2020-25412](https://cve.now/CVE-2020-25412.md): com\_line() in command.c in gnuplot 5.4 leads to an out-of-bounds-write from strncpy() that may lead to arbitrary code execution. (no CVSS)
- [CVE-2020-14315](https://cve.now/CVE-2020-14315.md): A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. (no CVSS, bsdiff)
- [CVE-2020-14393](https://cve.now/CVE-2020-14393.md): A buffer overflow was found in perl-DBI \< 1.643 in DBI.xs. (no CVSS, perl-dbi)
- [CVE-2020-2278](https://cve.now/CVE-2020-2278.md): Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permis (no CVSS, Jenkins project Jenkins Storable Configs Plugin · org.jvnet…)
- [CVE-2020-2276](https://cve.now/CVE-2020-2276.md): Jenkins Selection tasks Plugin 1.0 and earlier executes a user-specified program on the Jenkins controller, allowing attackers with Job/Conf (no CVSS, Jenkins project Jenkins Selection tasks Plugin · org.jvnet.…)
- [CVE-2020-2277](https://cve.now/CVE-2020-2277.md): Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller. (no CVSS, Jenkins project Jenkins Storable Configs Plugin · org.jvnet…)
- [CVE-2020-2273](https://cve.now/CVE-2020-2273.md): A cross-site request forgery (CSRF) vulnerability in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers to connect to an attacker-sp (no CVSS, Jenkins project Jenkins ElasTest Plugin · org.jenkins-ci.pl…)
- [CVE-2020-2274](https://cve.now/CVE-2020-2274.md): Jenkins ElasTest Plugin 1.2.1 and earlier stores its server password unencrypted in its global configuration file on the Jenkins controller (no CVSS, Jenkins project Jenkins ElasTest Plugin · org.jenkins-ci.pl…)
- [CVE-2020-2275](https://cve.now/CVE-2020-2275.md): Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job work (no CVSS, Jenkins project Jenkins Copy data to workspace Plugin · org…)
- [CVE-2020-2271](https://cve.now/CVE-2020-2271.md): Jenkins Locked Files Report Plugin 1.6 and earlier does not escape locked files' names in tooltips, resulting in a stored cross-site scripti (no CVSS, Jenkins project Jenkins Locked Files Report Plugin · org.jv…)
- [CVE-2020-2272](https://cve.now/CVE-2020-2272.md): A missing permission check in Jenkins ElasTest Plugin 1.2.1 and earlier allows attackers with Overall/Read permission to connect to an attac (no CVSS, Jenkins project Jenkins ElasTest Plugin · org.jenkins-ci.pl…)
- [CVE-2020-2269](https://cve.now/CVE-2020-2269.md): Jenkins chosen-views-tabbar Plugin 1.2 and earlier does not escape view names in the dropdown to select views, resulting in a stored cross-s (no CVSS, Jenkins project Jenkins chosen-views-tabbar Plugin · org.je…)
- [CVE-2020-2270](https://cve.now/CVE-2020-2270.md): Jenkins ClearCase Release Plugin 0.3 and earlier does not escape the composite baseline in badge tooltip, resulting in a stored cross-site s (no CVSS, Jenkins project Jenkins ClearCase Release Plugin · org.jvne…)
- [CVE-2020-2266](https://cve.now/CVE-2020-2266.md): Jenkins Description Column Plugin 1.3 and earlier does not escape the job description in the column tooltip, resulting in a stored cross-sit (no CVSS, Jenkins project Jenkins Description Column Plugin · org.jen…)
- [CVE-2020-2267](https://cve.now/CVE-2020-2267.md): A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some me (no CVSS, Jenkins project Jenkins MongoDB Plugin · org.jenkins-ci.plu…)
- [CVE-2020-2268](https://cve.now/CVE-2020-2268.md): A cross-site request forgery (CSRF) vulnerability in Jenkins MongoDB Plugin 1.3 and earlier allows attackers to gain access to some metadata (no CVSS, Jenkins project Jenkins MongoDB Plugin · org.jenkins-ci.plu…)
- [CVE-2020-2264](https://cve.now/CVE-2020-2264.md): Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (no CVSS, Jenkins project Jenkins Custom Job Icon Plugin · org.jenkin…)
- [CVE-2020-2265](https://cve.now/CVE-2020-2265.md): Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored (no CVSS, Jenkins project Jenkins Coverage/Complexity Scatter Plot Pl…)
- [CVE-2020-2262](https://cve.now/CVE-2020-2262.md): Jenkins Android Lint Plugin 2.6 and earlier does not escape the annotation message in tooltips, resulting in a stored cross-site scripting ( (no CVSS, Jenkins project Jenkins Android Lint Plugin · org.jvnet.hud…)
- [CVE-2020-2263](https://cve.now/CVE-2020-2263.md): Jenkins Radiator View Plugin 1.29 and earlier does not escape the full name of the jobs in tooltips, resulting in a stored cross-site script (no CVSS, Jenkins project Jenkins Radiator View Plugin · org.jenkins-…)
- [CVE-2020-2260](https://cve.now/CVE-2020-2260.md): A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attack (no CVSS, Jenkins project Jenkins Perfecto Plugin · io.jenkins.plugin…)
- [CVE-2020-2261](https://cve.now/CVE-2020-2261.md): Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to r (no CVSS, Jenkins project Jenkins Perfecto Plugin · io.jenkins.plugin…)
- [CVE-2020-2257](https://cve.now/CVE-2020-2257.md): Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site (no CVSS, Jenkins project Jenkins Validating String Parameter Plugin…)
- [CVE-2020-2258](https://cve.now/CVE-2020-2258.md): Jenkins Health Advisor by CloudBees Plugin 3.2.0 and earlier does not correctly perform a permission check in an HTTP endpoint, allowing att (no CVSS, Jenkins project Jenkins Health Advisor by CloudBees Plugin…)
- [CVE-2020-2259](https://cve.now/CVE-2020-2259.md): Jenkins computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips, resulting in a stored cross-site scripting (no CVSS, Jenkins project Jenkins computer-queue-plugin Plugin · jenk…)
- [CVE-2020-2255](https://cve.now/CVE-2020-2255.md): A missing permission check in Jenkins Blue Ocean Plugin 1.23.2 and earlier allows attackers with Overall/Read permission to connect to an at (no CVSS, Jenkins project Jenkins Blue Ocean Plugin · io.jenkins.blue…)
- [CVE-2020-2256](https://cve.now/CVE-2020-2256.md): Jenkins Pipeline Maven Integration Plugin 3.9.2 and earlier does not escape the upstream job's display name shown as part of a build cause, (no CVSS, Jenkins project Jenkins Pipeline Maven Integration Plugin ·…)
- [CVE-2020-2253](https://cve.now/CVE-2020-2253.md): Jenkins Email Extension Plugin 2.75 and earlier does not perform hostname validation when connecting to the configured SMTP server. (no CVSS, Jenkins project Jenkins Email Extension Plugin · org.jenkin…)
- [CVE-2020-2254](https://cve.now/CVE-2020-2254.md): Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure (no CVSS, Jenkins project Jenkins Blue Ocean Plugin · io.jenkins.blue…)
- [CVE-2020-2252](https://cve.now/CVE-2020-2252.md): Jenkins Mailer Plugin 1.32 and earlier does not perform hostname validation when connecting to the configured SMTP server. (no CVSS, Jenkins project Jenkins Mailer Plugin · org.jenkins-ci.plug…)
- [CVE-2020-14392](https://cve.now/CVE-2020-14392.md): An untrusted pointer dereference flaw was found in Perl-DBI \< 1.643. (no CVSS, perl-dbi)
- [CVE-2020-14386](https://cve.now/CVE-2020-14386.md): A flaw was found in the Linux kernel before 5.9-rc4. (CVSS 6.7, Linux Kernel kernel)
- [CVE-2020-25559](https://cve.now/CVE-2020-25559.md): gnuplot 5.5 is affected by double free when executing print\_set\_output. (no CVSS)
- [CVE-2020-7268](https://cve.now/CVE-2020-7268.md): McAfee Email Gateway (MEG) - Path Traversal vulnerability (CVSS 4.3, McAfee Email Gateway)
- [CVE-2020-10781](https://cve.now/CVE-2020-10781.md): A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the (CVSS 5.5, Linux Kernel kernel)
- [CVE-2020-14306](https://cve.now/CVE-2020-14306.md): An incorrect access control flaw was found in the operator, openshift-service-mesh/istio-rhel8-operator all versions through 1.1.3. (no CVSS, openshift-service-mesh/istio-rhel8-operator)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-09-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.