# CVEs published 2020-10-02

72 CVEs were published on October 2, 2020: 2 critical, 5 high. Days are UTC.

- [CVE-2020-25776](https://cve.now/CVE-2020-25776.md): Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2020-5988](https://cve.now/CVE-2020-5988.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to info (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5989](https://cve.now/CVE-2020-5989.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5985](https://cve.now/CVE-2020-5985.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to ta (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5986](https://cve.now/CVE-2020-5986.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tamp (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5987](https://cve.now/CVE-2020-5987.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5983](https://cve.now/CVE-2020-5983.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to w (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-5984](https://cve.now/CVE-2020-5984.md): NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing s (no CVSS, NVIDIA vGPU Software)
- [CVE-2020-15233](https://cve.now/CVE-2020-15233.md): OAuth2 Redirect URL validity does not respect query parameters and character casing for loopback addresses (CVSS 6.1, ory fosite · github.com/ory/fosite)
- [CVE-2020-15234](https://cve.now/CVE-2020-15234.md): Redirect URL matching ignores character casing (CVSS 6.1, ory fosite · github.com/ory/fosite)
- [CVE-2020-26527](https://cve.now/CVE-2020-26527.md): An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. (no CVSS)
- [CVE-2020-26526](https://cve.now/CVE-2020-26526.md): An issue was discovered in Damstra Smart Asset 2020.7. (no CVSS)
- [CVE-2020-26525](https://cve.now/CVE-2020-26525.md): Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter. (no CVSS)
- [CVE-2020-15232](https://cve.now/CVE-2020-15232.md): XML External Entity attack in mapfish-print (CVSS 9.3, mapfish-print · org.mapfish.print:print-lib +2)
- [CVE-2020-12676](https://cve.now/CVE-2020-12676.md): FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Sig (no CVSS)
- [CVE-2020-15231](https://cve.now/CVE-2020-15231.md): Cross-site scripting attack in mapfish-print (CVSS 9.3, mapfish-print · org.mapfish.print:print-lib +2)
- [CVE-2020-13338](https://cve.now/CVE-2020-13338.md): An issue has been discovered in GitLab affecting versions prior to 12.10.13, 13.0.8, 13.1.2. (CVSS 5.4, GitLab)
- [CVE-2020-13337](https://cve.now/CVE-2020-13337.md): An issue has been discovered in GitLab affecting versions from 12.10 to 12.10.12 that allowed for a stored XSS payload to be added as a grou (CVSS 7.2, GitLab)
- [CVE-2020-15589](https://cve.now/CVE-2020-15589.md): A design issue was discovered in GetInternetRequestHandle, InternetSendRequestEx and InternetSendRequestByBitrate in the client side of Zoho (no CVSS)
- [CVE-2020-24397](https://cve.now/CVE-2020-24397.md): An issue was discovered in the client side of Zoho ManageEngine Desktop Central 10.0.0.SP-534. (no CVSS)
- [CVE-2020-15230](https://cve.now/CVE-2020-15230.md): Arbitrary file read un Vapor (CVSS 8.5, vapor)
- [CVE-2020-24628](https://cve.now/CVE-2020-24628.md): A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. (no CVSS, HPE KVM IP Console Switches)
- [CVE-2020-24627](https://cve.now/CVE-2020-24627.md): A remote stored xss vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. (no CVSS, HPE KVM IP Console Switches)
- [CVE-2020-24568](https://cve.now/CVE-2020-24568.md): An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. (no CVSS)
- [CVE-2020-5981](https://cve.now/CVE-2020-5981.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll), in which a spe (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5982](https://cve.now/CVE-2020-5982.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) scheduler, in which the so (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5979](https://cve.now/CVE-2020-5979.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which a user is presented (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-5980](https://cve.now/CVE-2020-5980.md): NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in multiple components in which a securely loaded system DLL will (no CVSS, NVIDIA GPU Display Driver)
- [CVE-2020-26541](https://cve.now/CVE-2020-26541.md): The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. (CVSS 6.5)
- [CVE-2020-5422](https://cve.now/CVE-2020-5422.md): UAA password may appear in BOSH System Metrics Server process arguments (no CVSS, Cloud Foundry BOSH System Metrics Server)
- [CVE-2020-24356](https://cve.now/CVE-2020-24356.md): Local Privilege Escalation in cloudflared (CVSS 6.4, cloudflared · github.com/cloudflare/cloudflared)
- [CVE-2020-7070](https://cve.now/CVE-2020-7070.md): PHP parses encoded cookie names so malicious \`\_\_Host-\` cookies can be sent (CVSS 4.3, PHP Group PHP)
- [CVE-2020-7069](https://cve.now/CVE-2020-7069.md): Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVSS 5.4, PHP Group PHP)
- [CVE-2020-18191](https://cve.now/CVE-2020-18191.md): GetSimpleCMS-3.3.15 is affected by directory traversal. (no CVSS)
- [CVE-2020-18190](https://cve.now/CVE-2020-18190.md): Bludit v3.8.1 is affected by directory traversal. (no CVSS)
- [CVE-2020-18185](https://cve.now/CVE-2020-18185.md): class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. (no CVSS)
- [CVE-2020-18184](https://cve.now/CVE-2020-18184.md): In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres\_edittpl.php allows remote attackers to execute arbitrary PHP code by p (no CVSS)
- [CVE-2020-25623](https://cve.now/CVE-2020-25623.md): Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. (no CVSS)
- [CVE-2020-7738](https://cve.now/CVE-2020-7738.md): Arbitrary Code Execution (CVSS 8.3, shiba)
- [CVE-2020-8110](https://cve.now/CVE-2020-8110.md): Bitdefender ceva\_emu.cvd module denial-of-service (VA-8766) (CVSS 5.9, Bitdefender Engines)
- [CVE-2020-7737](https://cve.now/CVE-2020-7737.md): Prototype Pollution (CVSS 7.3, safetydance)
- [CVE-2020-7736](https://cve.now/CVE-2020-7736.md): Prototype Pollution (CVSS 7.3, bmoor)
- [CVE-2020-13168](https://cve.now/CVE-2020-13168.md): SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter. (no CVSS)
- [CVE-2020-26135](https://cve.now/CVE-2020-26135.md): Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH\_INFO. (no CVSS)
- [CVE-2020-26134](https://cve.now/CVE-2020-26134.md): Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. (no CVSS)
- [CVE-2020-26124](https://cve.now/CVE-2020-26124.md): openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc. (no CVSS)
- [CVE-2020-25741](https://cve.now/CVE-2020-25741.md): fdctrl\_write\_data in hw/block/fdc.c in QEMU 5.0.0 has a NULL pointer dereference via a NULL block pointer for the current drive. (no CVSS)
- [CVE-2020-24698](https://cve.now/CVE-2020-24698.md): An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. (no CVSS)
- [CVE-2020-24697](https://cve.now/CVE-2020-24697.md): An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. (no CVSS)
- [CVE-2020-24696](https://cve.now/CVE-2020-24696.md): An issue was discovered in PowerDNS Authoritative through 4.3.0 when --enable-experimental-gss-tsig is used. (no CVSS)
- [CVE-2020-17482](https://cve.now/CVE-2020-17482.md): An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records in (no CVSS)
- [CVE-2020-17382](https://cve.now/CVE-2020-17382.md): The MSI AmbientLink MsIo64 driver 1.0.0.8 has a Buffer Overflow (0x80102040, 0x80102044, 0x80102050,and 0x80102054). (no CVSS)
- [CVE-2020-14294](https://cve.now/CVE-2020-14294.md): An issue was discovered in Secudos Qiata FTA 1.70.19. (no CVSS)
- [CVE-2020-14293](https://cve.now/CVE-2020-14293.md): conf\_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (no CVSS)
- [CVE-2020-12127](https://cve.now/CVE-2020-12127.md): An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an at (no CVSS)
- [CVE-2020-12126](https://cve.now/CVE-2020-12126.md): Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak (no CVSS)
- [CVE-2020-12125](https://cve.now/CVE-2020-12125.md): A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker (no CVSS)
- [CVE-2020-12124](https://cve.now/CVE-2020-12124.md): A remote command-line injection vulnerability in the /cgi-bin/live\_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an atta (no CVSS)
- [CVE-2020-12123](https://cve.now/CVE-2020-12123.md): CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoi (no CVSS)
- [CVE-2019-19199](https://cve.now/CVE-2019-19199.md): REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout. (no CVSS)
- [CVE-2020-26534](https://cve.now/CVE-2020-26534.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26535](https://cve.now/CVE-2020-26535.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26536](https://cve.now/CVE-2020-26536.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26537](https://cve.now/CVE-2020-26537.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26538](https://cve.now/CVE-2020-26538.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26539](https://cve.now/CVE-2020-26539.md): An issue was discovered in Foxit Reader and PhantomPDF before 10.1. (no CVSS)
- [CVE-2020-26540](https://cve.now/CVE-2020-26540.md): An issue was discovered in Foxit Reader and PhantomPDF before 4.1 on macOS. (no CVSS)
- [CVE-2020-26524](https://cve.now/CVE-2020-26524.md): CodeLathe FileCloud before 20.2.0.11915 allows username enumeration. (no CVSS)
- [CVE-2020-26523](https://cve.now/CVE-2020-26523.md): Froala Editor before 3.2.2 allows XSS via pasted content. (no CVSS, froala/wysiwyg-editor)
- [CVE-2020-26519](https://cve.now/CVE-2020-26519.md): Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service. (no CVSS)
- [CVE-2020-26518](https://cve.now/CVE-2020-26518.md): Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora\_console/include/chart\_genera (no CVSS)
- [CVE-2020-26511](https://cve.now/CVE-2020-26511.md): The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.