# CVEs published 2020-09-30

54 CVEs were published on September 30, 2020: 1 critical, 3 high. Days are UTC.

- [CVE-2020-13336](https://cve.now/CVE-2020-13336.md): An issue has been discovered in GitLab affecting versions from 11.8 before 12.10.13. (CVSS 4.0, GitLab)
- [CVE-2020-12869](https://cve.now/CVE-2020-12869.md): RainbowFish PacsOne Server 6.8.4 allows XSS. (no CVSS)
- [CVE-2020-13952](https://cve.now/CVE-2020-13952.md): In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database (no CVSS, Apache Superset · apache-superset)
- [CVE-2020-16234](https://cve.now/CVE-2020-16234.md): FATEK Automation PLC WinProladder (no CVSS, FATEK Automation PLC WinProladder)
- [CVE-2020-12715](https://cve.now/CVE-2020-12715.md): RainbowFish PacsOne Server 6.8.4 has Incorrect Access Control. (no CVSS)
- [CVE-2020-12870](https://cve.now/CVE-2020-12870.md): RainbowFish PacsOne Server 6.8.4 allows SQL injection on the username parameter in the signup page. (no CVSS)
- [CVE-2020-6654](https://cve.now/CVE-2020-6654.md): DLL Hijacking (CVSS 7.8, Eaton 9000x Programming and Configuration Software)
- [CVE-2020-25830](https://cve.now/CVE-2020-25830.md): An issue was discovered in MantisBT before 2.24.3. (no CVSS, mantisbt/mantisbt)
- [CVE-2020-25781](https://cve.now/CVE-2020-25781.md): An issue was discovered in file\_download.php in MantisBT before 2.24.3. (no CVSS, mantisbt/mantisbt)
- [CVE-2020-25288](https://cve.now/CVE-2020-25288.md): An issue was discovered in MantisBT before 2.24.3. (no CVSS, mantisbt/mantisbt)
- [CVE-2020-25816](https://cve.now/CVE-2020-25816.md): HashiCorp Vault and Vault Enterprise versions 1.0 and newer allowed leases created with a batch token to outlive their TTL because expiratio (no CVSS, github.com/hashicorp/vault)
- [CVE-2020-25626](https://cve.now/CVE-2020-25626.md): A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. (no CVSS, Django REST Framework · djangorestframework)
- [CVE-2020-14374](https://cve.now/CVE-2020-14374.md): A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. (no CVSS, dpdk)
- [CVE-2020-14377](https://cve.now/CVE-2020-14377.md): A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. (no CVSS, dpdk)
- [CVE-2020-14376](https://cve.now/CVE-2020-14376.md): A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. (no CVSS, dpdk)
- [CVE-2020-14375](https://cve.now/CVE-2020-14375.md): A flaw was found in dpdk in versions before 18.11.10 and before 19.11.5. (no CVSS, dpdk)
- [CVE-2020-15849](https://cve.now/CVE-2020-15849.md): Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. (no CVSS)
- [CVE-2020-15488](https://cve.now/CVE-2020-15488.md): Re:Desk 2.3 allows insecure file upload. (no CVSS)
- [CVE-2020-15487](https://cve.now/CVE-2020-15487.md): Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.ph (no CVSS)
- [CVE-2020-19676](https://cve.now/CVE-2020-19676.md): Nacos 1.1.4 is affected by: Incorrect Access Control. (no CVSS, com.alibaba.nacos:nacos-common)
- [CVE-2020-24721](https://cve.now/CVE-2020-24721.md): An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications (no CVSS)
- [CVE-2020-19672](https://cve.now/CVE-2020-19672.md): Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter (no CVSS)
- [CVE-2019-18991](https://cve.now/CVE-2019-18991.md): A partial authentication bypass vulnerability exists on Atheros AR9132 3.60(AMX.8), AR9283 1.85, and AR9285 1.0.0.12NA devices. (CVSS 6.1)
- [CVE-2019-18990](https://cve.now/CVE-2019-18990.md): A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices (CVSS 6.1)
- [CVE-2019-18989](https://cve.now/CVE-2019-18989.md): A partial authentication bypass vulnerability exists on Mediatek MT7620N 1.06 devices. (CVSS 6.1)
- [CVE-2020-13951](https://cve.now/CVE-2020-13951.md): Attackers can use public NetTest web service of Apache OpenMeetings 4.0.0-5.0.0 to organize denial of service attack. (no CVSS, Apache OpenMeetings · org.apache.openmeetings:openmeetings-…)
- [CVE-2020-19670](https://cve.now/CVE-2020-19670.md): In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords. (no CVSS)
- [CVE-2018-11765](https://cve.now/CVE-2018-11765.md): In Apache Hadoop versions 3.0.0-alpha2 to 3.0.0, 2.9.0 to 2.9.2, 2.8.0 to 2.8.5, any users can access some servlets without authentication w (no CVSS, Apache Hadoop · org.apache.hadoop:hadoop-main)
- [CVE-2020-13953](https://cve.now/CVE-2020-13953.md): In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being ru (no CVSS, Apache Tapestry · org.apache.tapestry:tapestry-core)
- [CVE-2020-12506](https://cve.now/CVE-2020-12506.md): WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Versions \<= FW03 (CVSS 9.1, WAGO 750-362 · WAGO 750-363 +5)
- [CVE-2020-12505](https://cve.now/CVE-2020-12505.md): WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version \<= FW07 (CVSS 8.2, WAGO 750-852 · WAGO 750-880/xxx-xxx +5)
- [CVE-2020-21564](https://cve.now/CVE-2020-21564.md): An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. (no CVSS)
- [CVE-2020-26163](https://cve.now/CVE-2020-26163.md): BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows (no CVSS)
- [CVE-2020-21527](https://cve.now/CVE-2020-21527.md): There is an Arbitrary file deletion vulnerability in halo v1.1.3. (no CVSS)
- [CVE-2020-21526](https://cve.now/CVE-2020-21526.md): An Arbitrary file writing vulnerability in halo v1.1.3. (no CVSS)
- [CVE-2020-21525](https://cve.now/CVE-2020-21525.md): Halo V1.1.3 is affected by: Arbitrary File reading. (no CVSS)
- [CVE-2020-4629](https://cve.now/CVE-2020-4629.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information fro (CVSS 2.9, IBM WebSphere Application Server)
- [CVE-2020-21524](https://cve.now/CVE-2020-21524.md): There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrat (no CVSS)
- [CVE-2020-21523](https://cve.now/CVE-2020-21523.md): A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. (no CVSS)
- [CVE-2020-21522](https://cve.now/CVE-2020-21522.md): An issue was discovered in halo V1.1.3. (no CVSS)
- [CVE-2020-21244](https://cve.now/CVE-2020-21244.md): An issue was discovered in FrontAccounting 2.4.7. (no CVSS)
- [CVE-2019-17098](https://cve.now/CVE-2019-17098.md): Use of Hard-coded Cryptographic Key vulnerability in August Connect Wi-Fi Bridge App (CVSS 3.5, August Smart Lock and Connect Wi-Fi Bridge App · August Con…)
- [CVE-2020-26160](https://cve.now/CVE-2020-26160.md): jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with \[\]string{} for m\["aud"\] (which is al (CVSS 7.5, github.com/dgrijalva/jwt-go · github.com/dgrijalva/jwt-go/v4)
- [CVE-2020-22481](https://cve.now/CVE-2020-22481.md): An issue was discovered in HFish 0.5.1. (no CVSS)
- [CVE-2019-20920](https://cve.now/CVE-2019-20920.md): Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. (no CVSS, handlebars)
- [CVE-2019-20921](https://cve.now/CVE-2019-20921.md): bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). (no CVSS, bootstrap-select)
- [CVE-2019-20922](https://cve.now/CVE-2019-20922.md): Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. (no CVSS, handlebars)
- [CVE-2020-26149](https://cve.now/CVE-2020-26149.md): NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server. (no CVSS, nats · nats.ws)
- [CVE-2020-15731](https://cve.now/CVE-2020-15731.md): Local Privilege Escalation in Bitdefender Engines (VA-8953) (CVSS 3.2, Bitdefender Engines)
- [CVE-2020-5132](https://cve.now/CVE-2020-5132.md): SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as domain name collision (no CVSS, SonicWall SMA100 · SonicWall SMA1000 +1)
- [CVE-2020-26157](https://cve.now/CVE-2020-26157.md): Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. (no CVSS)
- [CVE-2020-26158](https://cve.now/CVE-2020-26158.md): Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. (no CVSS)
- [CVE-2020-22842](https://cve.now/CVE-2020-22842.md): CMS Made Simple before 2.2.15 allows XSS via the m1\_mod parameter in a ModuleManager local\_uninstall action to admin/moduleinterface.php. (no CVSS)
- [CVE-2020-14378](https://cve.now/CVE-2020-14378.md): An integer underflow in dpdk versions before 18.11.10 and before 19.11.5 in the \`move\_desc\` function can lead to large amounts of CPU cycles (no CVSS, dpdk)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-09-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.