# CVEs published 2020-10-13

23 CVEs were published on October 13, 2020: 1 critical, 11 high. Days are UTC.

- [CVE-2020-12911](https://cve.now/CVE-2020-12911.md): A denial of service vulnerability exists in the D3DKMTCreateAllocation handler functionality of AMD ATIKMDAG.SYS (e.g. (no CVSS, AMD Graphics Driver for Windows)
- [CVE-2020-12928](https://cve.now/CVE-2020-12928.md): A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT aut (no CVSS, AMD Ryzen Master)
- [CVE-2020-12933](https://cve.now/CVE-2020-12933.md): A denial of service vulnerability exists in the D3DKMTEscape handler functionality of AMD ATIKMDAG.SYS (e.g. (no CVSS, AMD Graphics Driver for Windows)
- [CVE-2020-25645](https://cve.now/CVE-2020-25645.md): A flaw was found in the Linux kernel in versions before 5.9-rc7. (no CVSS, kernel)
- [CVE-2020-13957](https://cve.now/CVE-2020-13957.md): Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for (no CVSS, Apache Solr · org.apache.solr:solr-parent +2)
- [CVE-2018-20243](https://cve.now/CVE-2018-20243.md): The implementation of POST with the username and password in the URL parameters exposed the credentials. (no CVSS, Apache Fineract)
- [CVE-2020-15251](https://cve.now/CVE-2020-15251.md): Privilege Escalation in Channelmgnt plug-in for Sopel (CVSS 7.7, MirahezeBots sopel-channelmgnt · sopel-plugins-channelmgnt)
- [CVE-2020-17417](https://cve.now/CVE-2020-17417.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. (CVSS 7.8, Foxit Reader)
- [CVE-2020-17414](https://cve.now/CVE-2020-17414.md): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit Reader 10.0.0.35798. (CVSS 7.8, Foxit Reader)
- [CVE-2020-17415](https://cve.now/CVE-2020-17415.md): This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PhantomPDF 10.0.0.35798. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-17416](https://cve.now/CVE-2020-17416.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.0.35798. (CVSS 7.8, Foxit Reader)
- [CVE-2020-17412](https://cve.now/CVE-2020-17412.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-17413](https://cve.now/CVE-2020-17413.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-17411](https://cve.now/CVE-2020-17411.md): This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.0.0.35798. (CVSS 3.3, Foxit PhantomPDF)
- [CVE-2020-17410](https://cve.now/CVE-2020-17410.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.0.0.35798. (CVSS 7.8, Foxit PhantomPDF)
- [CVE-2020-17406](https://cve.now/CVE-2020-17406.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112 (CVSS 8.8, Microhard Bullet-LTE)
- [CVE-2020-17407](https://cve.now/CVE-2020-17407.md): This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112 (CVSS 9.8, Microhard Bullet-LTE)
- [CVE-2020-17409](https://cve.now/CVE-2020-17409.md): This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6 (CVSS 6.5, NETGEAR Multiple Routers)
- [CVE-2020-25779](https://cve.now/CVE-2020-25779.md): Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in which a Internationalized Domain Name homograph attack (Puny-code) coul (no CVSS, Trend Micro Antivirus for Mac)
- [CVE-2020-15797](https://cve.now/CVE-2020-15797.md): A vulnerability has been identified in DCA Vantage Analyzer (All versions \< V4.5 are affected by CVE-2020-7590. (no CVSS, Siemens DCA Vantage Analyzer)
- [CVE-2020-7590](https://cve.now/CVE-2020-7590.md): A vulnerability has been identified in DCA Vantage Analyzer (All versions \< V4.5 are affected by CVE-2020-7590. (no CVSS, Siemens DCA Vantage Analyzer)
- [CVE-2020-16124](https://cve.now/CVE-2020-16124.md): Integer overflow in ROS communications library (CVSS 7.3, openrobotics ros\_comm ROS communications packages)
- [CVE-2020-7743](https://cve.now/CVE-2020-7743.md): Prototype Pollution (CVSS 7.3, mathjs)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.