# CVEs published 2020-09-24

99 CVEs were published on September 24, 2020: 3 critical, 36 high. Days are UTC.

- [CVE-2020-17365](https://cve.now/CVE-2020-17365.md): Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to pote (no CVSS)
- [CVE-2020-15843](https://cve.now/CVE-2020-15843.md): ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PR (no CVSS)
- [CVE-2020-15162](https://cve.now/CVE-2020-15162.md): Stored XSS in PrestaShop (CVSS 5.4, PrestaShop)
- [CVE-2020-13991](https://cve.now/CVE-2020-13991.md): vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register. (no CVSS)
- [CVE-2020-15160](https://cve.now/CVE-2020-15160.md): Blind SQL Injection in PrestaShop (no CVSS, PrestaShop)
- [CVE-2020-15161](https://cve.now/CVE-2020-15161.md): Potential XSS in PrestaShop (CVSS 5.4, PrestaShop)
- [CVE-2020-8348](https://cve.now/CVE-2020-8348.md): A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 th (CVSS 6.1, Lenovo Enterprise Network Disk)
- [CVE-2020-8347](https://cve.now/CVE-2020-8347.md): A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 t (CVSS 6.1, Lenovo Enterprise Network Disk)
- [CVE-2020-8333](https://cve.now/CVE-2020-8333.md): A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow a (CVSS 6.4, Lenovo BIOS)
- [CVE-2020-15851](https://cve.now/CVE-2020-15851.md): Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repo (no CVSS)
- [CVE-2020-15850](https://cve.now/CVE-2020-15850.md): Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director w (no CVSS)
- [CVE-2016-11086](https://cve.now/CVE-2016-11086.md): lib/oauth/consumer.rb in the oauth-ruby gem through 0.5.4 for Ruby does not verify server X.509 certificates if a certificate bundle cannot (no CVSS, oauth)
- [CVE-2020-15930](https://cve.now/CVE-2020-15930.md): An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag. (no CVSS, joplin)
- [CVE-2020-3141](https://cve.now/CVE-2020-3141.md): Cisco IOS XE Software Privilege Escalation Vulnerabilities (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2020-3359](https://cve.now/CVE-2020-3359.md): Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Multicast DNS Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3390](https://cve.now/CVE-2020-3390.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-19447](https://cve.now/CVE-2020-19447.md): SQL injection exists in the jdownloads 3.2.63 component for Joomla! com\_jdownloads/models/send.php via the f\_marked\_files\_id parameter. (no CVSS)
- [CVE-2020-3393](https://cve.now/CVE-2020-3393.md): Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability (CVSS 6.0, Cisco IOS XE Software)
- [CVE-2020-3396](https://cve.now/CVE-2020-3396.md): Cisco IOS XE Software IOx Guest Shell USB SSD Namespace Protection Privilege Escalation Vulnerability (CVSS 6.8, Cisco IOS XE Software)
- [CVE-2020-3399](https://cve.now/CVE-2020-3399.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3400](https://cve.now/CVE-2020-3400.md): Cisco IOS XE Software Web UI Authorization Bypass Vulnerability (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2020-3403](https://cve.now/CVE-2020-3403.md): Cisco IOS XE Software Command Injection Vulnerability (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2020-3404](https://cve.now/CVE-2020-3404.md): Cisco IOS XE Software Consent Token Bypass Vulnerability (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2020-3407](https://cve.now/CVE-2020-3407.md): Cisco IOS XE Software RESTCONF and NETCONF-YANG Access Control List Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3408](https://cve.now/CVE-2020-3408.md): Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability (CVSS 8.6, Cisco IOS)
- [CVE-2020-3409](https://cve.now/CVE-2020-3409.md): Cisco IOS and IOS XE Software PROFINET Denial of Service Vulnerability (CVSS 7.4, Cisco IOS)
- [CVE-2020-3414](https://cve.now/CVE-2020-3414.md): Cisco IOS XE Software for Cisco 4461 Integrated Services Routers Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3416](https://cve.now/CVE-2020-3416.md): Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2020-3417](https://cve.now/CVE-2020-3417.md): Cisco IOS XE Software Arbitrary Code Execution Vulnerability (CVSS 6.8, Cisco IOS XE Software)
- [CVE-2020-3418](https://cve.now/CVE-2020-3418.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family Improper Access Control Vulnerability (CVSS 4.7, Cisco IOS XE Software)
- [CVE-2020-3421](https://cve.now/CVE-2020-3421.md): Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3422](https://cve.now/CVE-2020-3422.md): Cisco IOS XE Software IP Service Level Agreements Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3423](https://cve.now/CVE-2020-3423.md): Cisco IOS XE Software Arbitrary Code Execution Vulnerability (CVSS 5.1, Cisco IOS XE Software)
- [CVE-2020-3425](https://cve.now/CVE-2020-3425.md): Cisco IOS XE Software Privilege Escalation Vulnerabilities (CVSS 8.8, Cisco IOS XE Software)
- [CVE-2020-3426](https://cve.now/CVE-2020-3426.md): Cisco IOS Software for Cisco Industrial Routers Virtual-LPWA Unauthorized Access Vulnerability (CVSS 7.5, Cisco IOS 15.2(6)E4)
- [CVE-2020-3428](https://cve.now/CVE-2020-3428.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WLAN Local Profiling Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3429](https://cve.now/CVE-2020-3429.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family WPA Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3465](https://cve.now/CVE-2020-3465.md): Cisco IOS XE Software Ethernet Frame Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3474](https://cve.now/CVE-2020-3474.md): Cisco IOS XE Software Web Management Framework Vulnerabilities (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2020-3475](https://cve.now/CVE-2020-3475.md): Cisco IOS XE Software Web Management Framework Vulnerabilities (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2020-3476](https://cve.now/CVE-2020-3476.md): Cisco IOS XE Software Arbitrary File Overwrite Vulnerability (CVSS 4.4, Cisco IOS XE Software)
- [CVE-2020-3477](https://cve.now/CVE-2020-3477.md): Cisco IOS and IOS XE Software Information Disclosure Vulnerability (CVSS 5.5, Cisco IOS)
- [CVE-2020-3479](https://cve.now/CVE-2020-3479.md): Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability (CVSS 6.1, Cisco IOS 15.2(5)E1)
- [CVE-2020-3480](https://cve.now/CVE-2020-3480.md): Cisco IOS XE Software Zone-Based Firewall Denial of Service Vulnerabilities (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3486](https://cve.now/CVE-2020-3486.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3487](https://cve.now/CVE-2020-3487.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3488](https://cve.now/CVE-2020-3488.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3489](https://cve.now/CVE-2020-3489.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3492](https://cve.now/CVE-2020-3492.md): Cisco IOS XE Software for Catalyst 9800 Series and Cisco AireOS Software for Cisco WLC Flexible NetFlow Version 9 Denial of Service Vulnerability (CVSS 8.6, Cisco Wireless LAN Controller)
- [CVE-2020-3493](https://cve.now/CVE-2020-3493.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3494](https://cve.now/CVE-2020-3494.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3497](https://cve.now/CVE-2020-3497.md): Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerabilities (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3503](https://cve.now/CVE-2020-3503.md): Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability (CVSS 6.0, Cisco IOS XE Software)
- [CVE-2020-3508](https://cve.now/CVE-2020-3508.md): Cisco IOS XE Software for Cisco ASR 1000 Series 20-Gbps Embedded Services Processor IP ARP Denial of Service Vulnerability (CVSS 7.4, Cisco IOS XE Software)
- [CVE-2020-3509](https://cve.now/CVE-2020-3509.md): Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3510](https://cve.now/CVE-2020-3510.md): Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3511](https://cve.now/CVE-2020-3511.md): Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability (CVSS 7.4, Cisco IOS)
- [CVE-2020-3512](https://cve.now/CVE-2020-3512.md): Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service Vulnerability (CVSS 7.4, Cisco IOS)
- [CVE-2020-3513](https://cve.now/CVE-2020-3513.md): Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities (CVSS 6.7, Cisco IOS XE Software)
- [CVE-2020-3516](https://cve.now/CVE-2020-3516.md): Cisco IOS XE Software Web UI Improper Input Validation Vulnerability (CVSS 4.3, Cisco IOS XE Software)
- [CVE-2020-3524](https://cve.now/CVE-2020-3524.md): Cisco IOS XE ROM Monitor Software Vulnerability (CVSS 6.4, Cisco IOS XE ROMMON Software)
- [CVE-2020-3526](https://cve.now/CVE-2020-3526.md): Cisco IOS XE Software Common Open Policy Service Engine Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3527](https://cve.now/CVE-2020-3527.md): Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XE Software)
- [CVE-2020-3552](https://cve.now/CVE-2020-3552.md): Cisco Aironet Access Points Ethernet Wired Clients Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2020-3559](https://cve.now/CVE-2020-3559.md): Cisco Aironet Access Point Authentication Flood Denial of Service Vulnerability (CVSS 6.8, Cisco Aironet Access Point Software)
- [CVE-2020-3560](https://cve.now/CVE-2020-3560.md): Cisco Aironet Access Points UDP Flooding Denial of Service Vulnerability (CVSS 8.6, Cisco Aironet Access Point Software)
- [CVE-2020-15222](https://cve.now/CVE-2020-15222.md): Replay of private\_key\_jwt possible in ORY Fosite (CVSS 8.1, ory fosite · github.com/ory/fosite)
- [CVE-2020-15223](https://cve.now/CVE-2020-15223.md): Ignored storage errors on token revokation in ORY Fosite (CVSS 8.0, ory fosite · github.com/ory/fosite)
- [CVE-2020-13119](https://cve.now/CVE-2020-13119.md): ismartgate PRO 1.5.9 is vulnerable to clickjacking. (no CVSS)
- [CVE-2020-12843](https://cve.now/CVE-2020-12843.md): ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. (no CVSS)
- [CVE-2020-12838](https://cve.now/CVE-2020-12838.md): ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/mailAdmin.php. (no CVSS)
- [CVE-2020-12842](https://cve.now/CVE-2020-12842.md): ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkUserExpirationDate.php. (no CVSS)
- [CVE-2020-12839](https://cve.now/CVE-2020-12839.md): ismartgate PRO 1.5.9 is vulnerable to privilege escalation by appending PHP code to /cron/checkExpirationDate.php. (no CVSS)
- [CVE-2020-12837](https://cve.now/CVE-2020-12837.md): ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. (no CVSS)
- [CVE-2020-12840](https://cve.now/CVE-2020-12840.md): ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload sound files via /index.php (no CVSS)
- [CVE-2020-12841](https://cve.now/CVE-2020-12841.md): ismartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to upload imae files via /index.php (no CVSS)
- [CVE-2020-12282](https://cve.now/CVE-2020-12282.md): iSmartgate PRO 1.5.9 is vulnerable to CSRF via the busca parameter in the form used for searching for users, accessible via /index.php. (no CVSS)
- [CVE-2020-12281](https://cve.now/CVE-2020-12281.md): iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to create a new user via /index.php. (no CVSS)
- [CVE-2020-12280](https://cve.now/CVE-2020-12280.md): iSmartgate PRO 1.5.9 is vulnerable to CSRF that allows remote attackers to open/close a specified garage door/gate via /isg/opendoor.php. (no CVSS)
- [CVE-2020-15840](https://cve.now/CVE-2020-15840.md): In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.pa (no CVSS, com.liferay.portal:com.liferay.portal.impl · com.liferay… +1)
- [CVE-2020-13501](https://cve.now/CVE-2020-13501.md): An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. (CVSS 9.8, Aveva)
- [CVE-2020-24365](https://cve.now/CVE-2020-24365.md): An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. (no CVSS)
- [CVE-2020-13500](https://cve.now/CVE-2020-13500.md): SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. (CVSS 9.8, Aveva)
- [CVE-2020-13499](https://cve.now/CVE-2020-13499.md): An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. (CVSS 9.8, Aveva)
- [CVE-2020-13505](https://cve.now/CVE-2020-13505.md): Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. (no CVSS, Aveva)
- [CVE-2020-13504](https://cve.now/CVE-2020-13504.md): Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. (no CVSS, Aveva)
- [CVE-2020-26088](https://cve.now/CVE-2020-26088.md): A missing CAP\_NET\_RAW check in NFC socket creation in net/nfc/rawsock.c in the Linux kernel before 5.8.2 could be used by local attackers to (no CVSS)
- [CVE-2020-16147](https://cve.now/CVE-2020-16147.md): The login page in Telmat AccessLog \<= 6.0 (TAL\_20180415) allows an attacker to get root shell access via Unauthenticated code injection over (no CVSS)
- [CVE-2020-16148](https://cve.now/CVE-2020-16148.md): The ping page of the administration panel in Telmat AccessLog \<= 6.0 (TAL\_20180415) allows an attacker to get root shell access via authenti (no CVSS)
- [CVE-2020-12811](https://cve.now/CVE-2020-12811.md): A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet may allow attacker to execute una (CVSS 4.9, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2020-12815](https://cve.now/CVE-2020-12815.md): An improper neutralization of input vulnerability in FortiTester before 3.9.0 may allow a remote authenticated attacker to inject script rel (no CVSS, Fortinet FortiTester)
- [CVE-2020-12817](https://cve.now/CVE-2020-12817.md): An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote authenticated attacker to injec (no CVSS, Fortinet FortiAnalyzer)
- [CVE-2020-12818](https://cve.now/CVE-2020-12818.md): An insufficient logging vulnerability in FortiGate before 6.4.1 may allow the traffic from an unauthenticated attacker to Fortinet owned IP (no CVSS, Fortinet FortiOS)
- [CVE-2020-12816](https://cve.now/CVE-2020-12816.md): An improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote authenticated attacker to perform a stored cro (no CVSS, Fortinet FortiNAC)
- [CVE-2020-22453](https://cve.now/CVE-2020-22453.md): Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information. (no CVSS)
- [CVE-2020-6020](https://cve.now/CVE-2020-6020.md): Check Point Security Management's Internal CA web management before Jumbo HFAs R80.10 Take 278, R80.20 Take 160, R80.30 Take 210, and R80.40 (no CVSS, ICA Management Portal)
- [CVE-2020-24560](https://cve.now/CVE-2020-24560.md): An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could all (no CVSS, Trend Micro Security)
- [CVE-2020-15604](https://cve.now/CVE-2020-15604.md): An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could all (no CVSS, Trend Micro Security)
- [CVE-2015-4719](https://cve.now/CVE-2015-4719.md): The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.