# CVEs published 2020-09-18

104 CVEs were published on September 18, 2020: 2 critical, 0 high. Days are UTC.

- [CVE-2020-8200](https://cve.now/CVE-2020-8200.md): Improper authentication in Citrix StoreFront Server \< 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Direc (no CVSS, Citrix StoreFront)
- [CVE-2020-8237](https://cve.now/CVE-2020-8237.md): Prototype pollution in json-bigint npm package \< 1.0.0 may lead to a denial-of-service (DoS) attack. (no CVSS, json-bigint)
- [CVE-2020-8201](https://cve.now/CVE-2020-8201.md): Node.js \< 12.18.4 and \< 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. (no CVSS, NodeJS Node)
- [CVE-2020-8247](https://cve.now/CVE-2020-8247.md): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 1 (no CVSS, Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP)
- [CVE-2020-8246](https://cve.now/CVE-2020-8246.md): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 1 (no CVSS, Citrix ADC, Citrix Gateway, Citrix SDWAN WAN-OP)
- [CVE-2020-8158](https://cve.now/CVE-2020-8158.md): Prototype pollution vulnerability in the TypeORM package \< 0.2.25 may allow attackers to add or modify Object properties leading to further (no CVSS, typeorm)
- [CVE-2020-8245](https://cve.now/CVE-2020-8245.md): Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, (no CVSS, Citrix ADC, Citrix Gateway)
- [CVE-2020-8253](https://cve.now/CVE-2020-8253.md): Improper authentication in Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 (no CVSS, Citrix XenMobile Server)
- [CVE-2020-8252](https://cve.now/CVE-2020-8252.md): The implementation of realpath in libuv \< 10.22.1, \< 12.18.4, and \< 14.9.0 used within Node.js incorrectly determined the buffer size which (no CVSS, NodeJS Node)
- [CVE-2020-8251](https://cve.now/CVE-2020-8251.md): Node.js \< 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unabl (no CVSS, NodeJS Node)
- [CVE-2020-8225](https://cve.now/CVE-2020-8225.md): A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentica (no CVSS, Desktop Client)
- [CVE-2020-11861](https://cve.now/CVE-2020-11861.md): Unauthorized escalation of local privileges vulnerability on Micro Focus Operation Agent, affecting all versions prior to versions 12.11. (no CVSS, Operations Agent)
- [CVE-2020-25633](https://cve.now/CVE-2020-25633.md): A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. (CVSS 5.3, Red Hat resteasy-client · org.jboss.resteasy:resteasy-cl… +1)
- [CVE-2020-9084](https://cve.now/CVE-2020-9084.md): Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. (no CVSS, Taurus-AN00B)
- [CVE-2020-16230](https://cve.now/CVE-2020-16230.md): All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (\*) under which domains can request resources. (no CVSS, HMS Networks Ewon Flexy and Cosy)
- [CVE-2020-7945](https://cve.now/CVE-2020-7945.md): Local registry credentials were included directly in the CD4PE deployment definition, which could expose these credentials to users who shou (no CVSS, Continuous Delivery for Puppet Enterprise)
- [CVE-2020-16247](https://cve.now/CVE-2020-16247.md): Philips Clinical Collaboration Platform Configuration (CVSS 6.8, Philips Clinical Collaboration Platform)
- [CVE-2020-15181](https://cve.now/CVE-2020-15181.md): Admin account takeover in Alfresco Reset Password (CVSS 9.3, FlexSolution AlfrescoResetPassword)
- [CVE-2020-16200](https://cve.now/CVE-2020-16200.md): Philips Clinical Collaboration Platform Algorithm Downgrade (CVSS 6.5, Philips Clinical Collaboration Platform)
- [CVE-2020-16198](https://cve.now/CVE-2020-16198.md): Philips Clinical Collaboration Platform Protection Mechanism Failure (CVSS 5.0, Philips Clinical Collaboration Platform)
- [CVE-2020-14525](https://cve.now/CVE-2020-14525.md): Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page (CVSS 3.5, Philips Clinical Collaboration Platform)
- [CVE-2020-14506](https://cve.now/CVE-2020-14506.md): Philips Clinical Collaboration Platform Cross-site Request Forgery (CVSS 3.4, Philips Clinical Collaboration Platform)
- [CVE-2020-14390](https://cve.now/CVE-2020-14390.md): A flaw was found in the Linux kernel in versions before 5.9-rc6. (no CVSS, kernel)
- [CVE-2020-3979](https://cve.now/CVE-2020-3979.md): InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writa (no CVSS, VMware InstallBuilder)
- [CVE-2020-25766](https://cve.now/CVE-2020-25766.md): An issue was discovered in MISP before 2.4.132. (no CVSS)
- [CVE-2020-15189](https://cve.now/CVE-2020-15189.md): Remote Code Execution in SOY CMS (CVSS 6.8, inunosinsi soycms)
- [CVE-2020-14021](https://cve.now/CVE-2020-14021.md): An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. (no CVSS)
- [CVE-2020-14029](https://cve.now/CVE-2020-14029.md): An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. (no CVSS)
- [CVE-2020-15188](https://cve.now/CVE-2020-15188.md): Unauthenticated Remote Code Execution in SOY CMS (CVSS 10.0, inunosinsi soycms)
- [CVE-2020-24623](https://cve.now/CVE-2020-24623.md): A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. (no CVSS, HPE Universal API Framework for VMware ESXi (OVA) in HPE Un…)
- [CVE-2020-0365](https://cve.now/CVE-2020-0365.md): In netd, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0349](https://cve.now/CVE-2020-0349.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0348](https://cve.now/CVE-2020-0348.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0331](https://cve.now/CVE-2020-0331.md): In Settings, there is a possible permissions bypass. (no CVSS, Android)
- [CVE-2020-0327](https://cve.now/CVE-2020-0327.md): In core networking, there is a missing permission check. (no CVSS, Android)
- [CVE-2020-0325](https://cve.now/CVE-2020-0325.md): In NFC, there is a missing bounds check. (no CVSS, Android)
- [CVE-2020-0316](https://cve.now/CVE-2020-0316.md): In Telephony, there is a missing permission check. (no CVSS, Android)
- [CVE-2020-0315](https://cve.now/CVE-2020-0315.md): In Zen Mode, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0313](https://cve.now/CVE-2020-0313.md): In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0311](https://cve.now/CVE-2020-0311.md): In InputManagerService, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0310](https://cve.now/CVE-2020-0310.md): In Settings, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0307](https://cve.now/CVE-2020-0307.md): In Settings, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0304](https://cve.now/CVE-2020-0304.md): In Settings, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0302](https://cve.now/CVE-2020-0302.md): In Settings, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0300](https://cve.now/CVE-2020-0300.md): In NFC, there is a possible out of bounds read due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0295](https://cve.now/CVE-2020-0295.md): In Telecom, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0294](https://cve.now/CVE-2020-0294.md): In bindWallpaperComponentLocked of WallpaperManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0292](https://cve.now/CVE-2020-0292.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0291](https://cve.now/CVE-2020-0291.md): In Bluetooth, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0286](https://cve.now/CVE-2020-0286.md): In Bluetooth AVRCP, there is a possible leak of audio metadata due to residual data. (no CVSS, Android)
- [CVE-2020-0285](https://cve.now/CVE-2020-0285.md): In Telephony, there is a possible permission bypass due to a missing permission check. (no CVSS, Android)
- [CVE-2020-5976](https://cve.now/CVE-2020-5976.md): NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in t (no CVSS, NVIDIA GeForce NOW Application)
- [CVE-2020-0284](https://cve.now/CVE-2020-0284.md): In Telephony, there is a possible permission bypass due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0282](https://cve.now/CVE-2020-0282.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0281](https://cve.now/CVE-2020-0281.md): In NFC, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0276](https://cve.now/CVE-2020-0276.md): In Telephony, there is a possible permission bypass due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0272](https://cve.now/CVE-2020-0272.md): In libhwbinder, there is a possible information disclosure due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0269](https://cve.now/CVE-2020-0269.md): In Android Auto Settings, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0265](https://cve.now/CVE-2020-0265.md): In Telephony, there are possible leaks of sensitive data due to missing permission checks. (no CVSS, Android)
- [CVE-2020-0263](https://cve.now/CVE-2020-0263.md): In the Accessibility service, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0405](https://cve.now/CVE-2020-0405.md): In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. (no CVSS, Android)
- [CVE-2020-0350](https://cve.now/CVE-2020-0350.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0347](https://cve.now/CVE-2020-0347.md): In iptables, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0335](https://cve.now/CVE-2020-0335.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0334](https://cve.now/CVE-2020-0334.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0326](https://cve.now/CVE-2020-0326.md): In NFC, there is a possible out of bounds write due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0319](https://cve.now/CVE-2020-0319.md): In NFC, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0309](https://cve.now/CVE-2020-0309.md): In the Bluetooth server, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0299](https://cve.now/CVE-2020-0299.md): In Bluetooth, there is a possible spoofing of bluetooth device metadata due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0298](https://cve.now/CVE-2020-0298.md): In Bluetooth, there is a possible control over Bluetooth enabled state due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0273](https://cve.now/CVE-2020-0273.md): In hwservicemanager, there is a possible out of bounds write due to freeing a wild pointer. (no CVSS, Android)
- [CVE-2020-0271](https://cve.now/CVE-2020-0271.md): In the Settings app, there is an insecure default value. (no CVSS, Android)
- [CVE-2020-0268](https://cve.now/CVE-2020-0268.md): In NFC, there is a possible use-after-free due to a race condition. (no CVSS, Android)
- [CVE-2020-0262](https://cve.now/CVE-2020-0262.md): In WiFi tethering, there is a possible attacker controlled intent due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-7358](https://cve.now/CVE-2020-7358.md): Code Injection in Rapid7 AppSpider Pro Installer (CVSS 5.8, Rapid7 AppSpider)
- [CVE-2020-0089](https://cve.now/CVE-2020-0089.md): In the audio server, there is a missing permission check. (no CVSS, Android)
- [CVE-2020-0354](https://cve.now/CVE-2020-0354.md): In Bluetooth, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0318](https://cve.now/CVE-2020-0318.md): In the System UI, there is a possible system crash due to an uncaught exception. (no CVSS, Android)
- [CVE-2020-5975](https://cve.now/CVE-2020-5975.md): NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that include (no CVSS, NVIDIA GeForce NOW Application)
- [CVE-2020-15958](https://cve.now/CVE-2020-15958.md): An issue was discovered in 1CRM System through 8.6.7. (no CVSS)
- [CVE-2020-9745](https://cve.now/CVE-2020-9745.md): Adobe Media Encoder PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1, Adobe Media Encoder)
- [CVE-2020-9744](https://cve.now/CVE-2020-9744.md): Adobe Media Encoder WMV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1, Adobe Media Encoder)
- [CVE-2020-9739](https://cve.now/CVE-2020-9739.md): Adobe Media Encoder FLV File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 6.1, Adobe Media Encoder)
- [CVE-2020-15773](https://cve.now/CVE-2020-15773.md): An issue was discovered in Gradle Enterprise before 2020.2.4. (no CVSS)
- [CVE-2020-15767](https://cve.now/CVE-2020-15767.md): An issue was discovered in Gradle Enterprise before 2020.2.5. (no CVSS)
- [CVE-2020-15770](https://cve.now/CVE-2020-15770.md): An issue was discovered in Gradle Enterprise 2018.5. (no CVSS)
- [CVE-2020-15771](https://cve.now/CVE-2020-15771.md): An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. (no CVSS)
- [CVE-2020-15772](https://cve.now/CVE-2020-15772.md): An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. (no CVSS)
- [CVE-2020-15774](https://cve.now/CVE-2020-15774.md): An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. (no CVSS)
- [CVE-2020-15775](https://cve.now/CVE-2020-15775.md): An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. (no CVSS)
- [CVE-2020-15776](https://cve.now/CVE-2020-15776.md): An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. (no CVSS)
- [CVE-2020-15768](https://cve.now/CVE-2020-15768.md): An issue was discovered in Gradle Enterprise 2017.3 - 2020.2.4 and Gradle Enterprise Build Cache Node 1.0 - 9.2. (no CVSS)
- [CVE-2020-15769](https://cve.now/CVE-2020-15769.md): An issue was discovered in Gradle Enterprise 2020.2 - 2020.2.4. (no CVSS)
- [CVE-2020-5628](https://cve.now/CVE-2020-5628.md): UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable A (no CVSS, UNIQLO CO. UNIQLO App for Android)
- [CVE-2020-5629](https://cve.now/CVE-2020-5629.md): UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App (no CVSS, UNIQLO CO. UNIQLO App for Android)
- [CVE-2020-5605](https://cve.now/CVE-2020-5605.md): Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting v (no CVSS, BUFFALO WHR-G54S)
- [CVE-2020-5606](https://cve.now/CVE-2020-5606.md): Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially (no CVSS, BUFFALO WHR-G54S)
- [CVE-2020-25756](https://cve.now/CVE-2020-25756.md): A buffer overflow vulnerability exists in the mg\_get\_http\_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. (no CVSS)
- [CVE-2020-25751](https://cve.now/CVE-2020-25751.md): The paGO Commerce plugin 2.5.9.0 for Joomla! allows SQL Injection via the administrator/index.php?option=com\_pago&view=comments filter\_publi (no CVSS)
- [CVE-2020-25750](https://cve.now/CVE-2020-25750.md): An issue was discovered in DotPlant2 before 2020-09-14. (no CVSS, devgroup/dotplant)
- [CVE-2020-25744](https://cve.now/CVE-2020-25744.md): SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of se (no CVSS)
- [CVE-2020-25735](https://cve.now/CVE-2020-25735.md): webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add\_announcement.php, administration (no CVSS)
- [CVE-2020-25734](https://cve.now/CVE-2020-25734.md): webTareas through 2.1 allows files/Default/ Directory Listing. (no CVSS)
- [CVE-2020-25733](https://cve.now/CVE-2020-25733.md): webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.