# CVEs published 2020-10-16

200 CVEs were published on October 16, 2020: 0 critical, 90 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2020-1167](https://cve.now/CVE-2020-1167.md): Microsoft Graphics Components Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1243](https://cve.now/CVE-2020-1243.md): Windows Hyper-V Denial of Service Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1047](https://cve.now/CVE-2020-1047.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-1080](https://cve.now/CVE-2020-1080.md): Windows Hyper-V Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-17022](https://cve.now/CVE-2020-17022.md): Microsoft Windows Codecs Library Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-17023](https://cve.now/CVE-2020-17023.md): Visual Studio JSON Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Visual Studio Code)
- [CVE-2020-16995](https://cve.now/CVE-2020-16995.md): Network Watcher Agent Virtual Machine Extension for Linux Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Network Watcher Agent virtual machine extension f…)
- [CVE-2020-17003](https://cve.now/CVE-2020-17003.md): Base3D Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 3D Viewer)
- [CVE-2020-16977](https://cve.now/CVE-2020-16977.md): Visual Studio Code Python Extension Remote Code Execution Vulnerability (CVSS 7.0, Microsoft Python extension for Visual Studio Code)
- [CVE-2020-16978](https://cve.now/CVE-2020-16978.md): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2020-16980](https://cve.now/CVE-2020-16980.md): Windows iSCSI Target Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows Server · Microsoft Windows Server,)
- [CVE-2020-16975](https://cve.now/CVE-2020-16975.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16976](https://cve.now/CVE-2020-16976.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16973](https://cve.now/CVE-2020-16973.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16974](https://cve.now/CVE-2020-16974.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16969](https://cve.now/CVE-2020-16969.md): Microsoft Exchange Information Disclosure Vulnerability (CVSS 7.1, Microsoft Exchange Server 2019 Cumulative Update · Micro… +1)
- [CVE-2020-16972](https://cve.now/CVE-2020-16972.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16967](https://cve.now/CVE-2020-16967.md): Windows Camera Codec Pack Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16968](https://cve.now/CVE-2020-16968.md): Windows Camera Codec Pack Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16955](https://cve.now/CVE-2020-16955.md): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 2013 Click-to-Run · Microsoft Office +1)
- [CVE-2020-16956](https://cve.now/CVE-2020-16956.md): Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability (CVSS 5.4, Microsoft Dynamics 365 (on-premises))
- [CVE-2020-16957](https://cve.now/CVE-2020-16957.md): Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2020-16953](https://cve.now/CVE-2020-16953.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-16954](https://cve.now/CVE-2020-16954.md): Microsoft Office Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2020-16951](https://cve.now/CVE-2020-16951.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.6, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-16952](https://cve.now/CVE-2020-16952.md): Microsoft SharePoint Remote Code Execution Vulnerability (CVSS 8.6, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-16949](https://cve.now/CVE-2020-16949.md): Microsoft Outlook Denial of Service Vulnerability (CVSS 4.7, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2020-16950](https://cve.now/CVE-2020-16950.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 5.0, Microsoft SharePoint Server)
- [CVE-2020-16948](https://cve.now/CVE-2020-16948.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 6.5, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-16945](https://cve.now/CVE-2020-16945.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 8.7, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-16946](https://cve.now/CVE-2020-16946.md): Microsoft Office SharePoint XSS Vulnerability (CVSS 8.7, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-16943](https://cve.now/CVE-2020-16943.md): Dynamics 365 Commerce Elevation of Privilege Vulnerability (CVSS 6.5, Microsoft Dynamics 365 Commerce)
- [CVE-2020-16944](https://cve.now/CVE-2020-16944.md): Microsoft SharePoint Reflective XSS Vulnerability (CVSS 8.7, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-16941](https://cve.now/CVE-2020-16941.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 4.1, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-16942](https://cve.now/CVE-2020-16942.md): Microsoft SharePoint Information Disclosure Vulnerability (CVSS 4.1, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-16938](https://cve.now/CVE-2020-16938.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16939](https://cve.now/CVE-2020-16939.md): Group Policy Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16940](https://cve.now/CVE-2020-16940.md): Windows - User Profile Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16937](https://cve.now/CVE-2020-16937.md): .NET Framework Information Disclosure Vulnerability (CVSS 4.7, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 ·…)
- [CVE-2020-16935](https://cve.now/CVE-2020-16935.md): Windows COM Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16936](https://cve.now/CVE-2020-16936.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16932](https://cve.now/CVE-2020-16932.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2020-16933](https://cve.now/CVE-2020-16933.md): Microsoft Word Security Feature Bypass Vulnerability (CVSS 7.0, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2020-16934](https://cve.now/CVE-2020-16934.md): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Office 2013 Click-to-Run · Microsoft Office +1)
- [CVE-2020-16930](https://cve.now/CVE-2020-16930.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise)
- [CVE-2020-16931](https://cve.now/CVE-2020-16931.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Office · Microsoft 365 Apps for Enterprise +1)
- [CVE-2020-16928](https://cve.now/CVE-2020-16928.md): Microsoft Office Click-to-Run Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Office 2013 Click-to-Run · Microsoft Office +1)
- [CVE-2020-16929](https://cve.now/CVE-2020-16929.md): Microsoft Excel Remote Code Execution Vulnerability (CVSS 7.8, Microsoft SharePoint Enterprise Server 2013 Service Pack… +3)
- [CVE-2020-16924](https://cve.now/CVE-2020-16924.md): Jet Database Engine Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16927](https://cve.now/CVE-2020-16927.md): Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-16922](https://cve.now/CVE-2020-16922.md): Windows Spoofing Vulnerability (CVSS 5.3, Microsoft Windows)
- [CVE-2020-16923](https://cve.now/CVE-2020-16923.md): Microsoft Graphics Components Remote Code Execution Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16919](https://cve.now/CVE-2020-16919.md): Windows Enterprise App Management Service Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16920](https://cve.now/CVE-2020-16920.md): Windows Application Compatibility Client Library Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16921](https://cve.now/CVE-2020-16921.md): Windows Text Services Framework Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16916](https://cve.now/CVE-2020-16916.md): Windows COM Server Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16918](https://cve.now/CVE-2020-16918.md): Base3D Remote Code Execution Vulnerability (CVSS 7.8, Microsoft 365 Apps for Enterprise · Microsoft 3D Viewer)
- [CVE-2020-16914](https://cve.now/CVE-2020-16914.md): Windows GDI+ Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16915](https://cve.now/CVE-2020-16915.md): Media Foundation Memory Corruption Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16912](https://cve.now/CVE-2020-16912.md): Windows Backup Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16913](https://cve.now/CVE-2020-16913.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16910](https://cve.now/CVE-2020-16910.md): Windows Security Feature Bypass Vulnerability (CVSS 6.2, Microsoft Windows)
- [CVE-2020-16911](https://cve.now/CVE-2020-16911.md): GDI+ Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-16908](https://cve.now/CVE-2020-16908.md): Windows Setup Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16909](https://cve.now/CVE-2020-16909.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16905](https://cve.now/CVE-2020-16905.md): Windows Error Reporting Elevation of Privilege Vulnerability (CVSS 6.8, Microsoft Windows)
- [CVE-2020-16907](https://cve.now/CVE-2020-16907.md): Win32k Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16902](https://cve.now/CVE-2020-16902.md): Windows Installer Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16904](https://cve.now/CVE-2020-16904.md): Azure Functions Elevation of Privilege Vulnerability (CVSS 5.3, Microsoft Azure Functions)
- [CVE-2020-16899](https://cve.now/CVE-2020-16899.md): Windows TCP/IP Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-16900](https://cve.now/CVE-2020-16900.md): Windows Event System Elevation of Privilege Vulnerability (CVSS 7.0, Microsoft Windows)
- [CVE-2020-16901](https://cve.now/CVE-2020-16901.md): Windows Kernel Information Disclosure Vulnerability (CVSS 5.0, Microsoft Windows)
- [CVE-2020-16897](https://cve.now/CVE-2020-16897.md): NetBT Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16898](https://cve.now/CVE-2020-16898.md): Windows TCP/IP Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-16895](https://cve.now/CVE-2020-16895.md): Windows Error Reporting Manager Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16896](https://cve.now/CVE-2020-16896.md): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-16892](https://cve.now/CVE-2020-16892.md): Windows Image Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16894](https://cve.now/CVE-2020-16894.md): Windows NAT Denial of Service Vulnerability (CVSS 7.7, Microsoft Windows)
- [CVE-2020-16890](https://cve.now/CVE-2020-16890.md): Windows Kernel Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16891](https://cve.now/CVE-2020-16891.md): Windows Hyper-V Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Windows)
- [CVE-2020-16887](https://cve.now/CVE-2020-16887.md): Windows Network Connections Service Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16889](https://cve.now/CVE-2020-16889.md): Windows KernelStream Information Disclosure Vulnerability (CVSS 5.5, Microsoft Windows)
- [CVE-2020-16885](https://cve.now/CVE-2020-16885.md): Windows Storage VSP Driver Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16886](https://cve.now/CVE-2020-16886.md): PowerShellGet Module WDAC Security Feature Bypass Vulnerability (CVSS 5.3, Microsoft PowerShellGet)
- [CVE-2020-16876](https://cve.now/CVE-2020-16876.md): Windows Application Compatibility Client Library Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2020-16877](https://cve.now/CVE-2020-16877.md): Windows Elevation of Privilege Vulnerability (CVSS 7.1, Microsoft Windows)
- [CVE-2020-0764](https://cve.now/CVE-2020-0764.md): Windows Storage Services Elevation of Privilege Vulnerability (CVSS 7.8, Microsoft Windows)
- [CVE-2020-16863](https://cve.now/CVE-2020-16863.md): Windows Remote Desktop Service Denial of Service Vulnerability (CVSS 7.5, Microsoft Windows)
- [CVE-2020-1689](https://cve.now/CVE-2020-1689.md): Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames when deployed in a Virtual Chassis configuration (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1688](https://cve.now/CVE-2020-1688.md): Junos OS: SRX and NFX Series: Insufficient Web API private key protection (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1687](https://cve.now/CVE-2020-1687.md): Junos OS: EX4300-MP/EX4600/QFX5K Series: High CPU load due to receipt of specific layer 2 frames in EVPN-VXLAN deployment. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1686](https://cve.now/CVE-2020-1686.md): Junos OS: Kernel crash (vmcore) upon receipt of a malformed IPv6 packet. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1685](https://cve.now/CVE-2020-1685.md): Junos OS: EX4600, QFX5K Series: Stateless firewall filter matching 'user-vlan-id' will cause incomplete discard action (CVSS 5.8, Juniper Networks Junos OS)
- [CVE-2020-1684](https://cve.now/CVE-2020-1684.md): Junos OS: SRX Series: High CPU load due to processing for HTTP traffic when Application Identification is enabled. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1683](https://cve.now/CVE-2020-1683.md): Junos OS: Memory leak leads to kernel crash (vmcore) due to SNMP polling (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1682](https://cve.now/CVE-2020-1682.md): Junos OS: SRX1500, vSRX, SRX4K, NFX150, NFX250: Denial of service vulnerability executing local CLI command (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2020-1681](https://cve.now/CVE-2020-1681.md): Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2020-1680](https://cve.now/CVE-2020-1680.md): Junos OS: MX Series: MS-MPC/MIC might crash when processing malformed IPv6 packet in NAT64 configuration. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2020-1679](https://cve.now/CVE-2020-1679.md): Junos OS: PTX/QFX Series: Kernel Routing Table (KRT) queue stuck after packet sampling a malformed packet when the tunnel-observation mpls-over-udp configuration is enabled. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1678](https://cve.now/CVE-2020-1678.md): Junos OS and Junos OS Evolved: RPD can crash due to a slow memory leak. (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1677](https://cve.now/CVE-2020-1677.md): Juniper Networks Mist Cloud UI: SAML authentication attribute elements handling vulnerability. (CVSS 7.2, Juniper Networks MIST Cloud UI)
- [CVE-2020-1676](https://cve.now/CVE-2020-1676.md): Juniper Networks Mist Cloud UI: SAML authentication response handling vulnerability. (CVSS 7.2, Juniper Networks MIST Cloud UI)
- [CVE-2020-1675](https://cve.now/CVE-2020-1675.md): Juniper Networks Mist Cloud UI: SAML authentication certificate vulnerability. (CVSS 8.3, Juniper Networks MIST Cloud UI)
- [CVE-2020-1673](https://cve.now/CVE-2020-1673.md): Junos OS: Reflected Cross-site Scripting vulnerability in J-Web and web based (HTTP/HTTPS) services (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-1672](https://cve.now/CVE-2020-1672.md): Junos OS: jdhcpd process crash when processing a specific DHCPDv6 packet in DHCPv6 relay configuration. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1671](https://cve.now/CVE-2020-1671.md): Junos OS: Receipt of malformed DHCPv6 packets causes jdhcpd to crash. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1670](https://cve.now/CVE-2020-1670.md): Junos OS: EX4300 Series: High CPU load due to receipt of specific IPv4 packets (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1669](https://cve.now/CVE-2020-1669.md): Junos OS: NFX350: Password hashes stored in world-readable format (CVSS 6.3, Juniper Networks Junos OS)
- [CVE-2020-1668](https://cve.now/CVE-2020-1668.md): Junos OS: EX2300 Series: High CPU load due to receipt of specific multicast packets on layer 2 interface (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2020-1667](https://cve.now/CVE-2020-1667.md): Junos OS: MX Series: Services card might restart due to a race condition when DNS filtering is enabled. (CVSS 8.3, Juniper Networks Junos OS)
- [CVE-2020-1666](https://cve.now/CVE-2020-1666.md): Junos OS Evolved: 'console log-out-on-disconnect' fails to terminate session on console cable disconnection (CVSS 6.6, Juniper Networks Junos OS Evolved)
- [CVE-2020-1665](https://cve.now/CVE-2020-1665.md): Junos OS: MX series/EX9200 Series: IPv6 DDoS protection does not work as expected. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2020-1664](https://cve.now/CVE-2020-1664.md): Junos OS: Buffer overflow vulnerability in device control daemon (CVSS 7.8, Juniper Networks Junos OS)
- [CVE-2020-1662](https://cve.now/CVE-2020-1662.md): Junos OS and Junos OS Evolved: RPD crash due to BGP session flapping. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1661](https://cve.now/CVE-2020-1661.md): Junos OS: jdhcpd process crash when forwarding a malformed DHCP packet. (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2020-1660](https://cve.now/CVE-2020-1660.md): Junos OS: MX Series: Receipt of specific packets can cause services card to restart when DNS filtering is configured. (CVSS 8.3, Juniper Networks Junos OS)
- [CVE-2020-1657](https://cve.now/CVE-2020-1657.md): Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2020-1656](https://cve.now/CVE-2020-1656.md): Junos OS: When a DHCPv6 Relay-Agent is configured upon receipt of a specific DHCPv6 client message, Remote Code Execution may occur. (CVSS 8.8, Juniper Networks Junos OS)
- [CVE-2020-27194](https://cve.now/CVE-2020-27194.md): An issue was discovered in the Linux kernel before 5.8.15. (no CVSS)
- [CVE-2020-25214](https://cve.now/CVE-2020-25214.md): In the client in Overwolf 0.149.2.30, a channel can be accessed or influenced by an actor that is not an endpoint. (no CVSS)
- [CVE-2019-12305](https://cve.now/CVE-2019-12305.md): In EZCast Pro II, the administrator password md5 hash is provided upon a web request. (no CVSS)
- [CVE-2020-26183](https://cve.now/CVE-2020-26183.md): Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. (CVSS 6.8, Dell NetWorker)
- [CVE-2020-26182](https://cve.now/CVE-2020-26182.md): Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. (CVSS 6.8, Dell NetWorker)
- [CVE-2020-15254](https://cve.now/CVE-2020-15254.md): Undefined Behavior in bounded Crossbeam channel (CVSS 8.1, crossbeam-rs crossbeam · crossbeam-channel)
- [CVE-2020-9992](https://cve.now/CVE-2020-9992.md): This issue was addressed by encrypting communications over the network to devices running iOS 14, iPadOS 14, tvOS 14, and watchOS 7. (no CVSS, Apple iOS · Apple Xcode)
- [CVE-2020-9983](https://cve.now/CVE-2020-9983.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple Safari)
- [CVE-2020-9976](https://cve.now/CVE-2020-9976.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-9968](https://cve.now/CVE-2020-9968.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-15252](https://cve.now/CVE-2020-15252.md): RCE in XWiki (CVSS 8.5, xwiki-platform · org.xwiki.platform:xwiki-platform-oldcore)
- [CVE-2020-9964](https://cve.now/CVE-2020-9964.md): A memory initialization issue was addressed with improved memory handling. (no CVSS, Apple iOS)
- [CVE-2020-9959](https://cve.now/CVE-2020-9959.md): A lock screen issue allowed access to messages on a locked device. (no CVSS, Apple iOS)
- [CVE-2020-9958](https://cve.now/CVE-2020-9958.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS)
- [CVE-2020-9952](https://cve.now/CVE-2020-9952.md): An input validation issue was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS +3)
- [CVE-2020-9951](https://cve.now/CVE-2020-9951.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple Safari)
- [CVE-2020-9946](https://cve.now/CVE-2020-9946.md): This issue was addressed with improved checks. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2020-9948](https://cve.now/CVE-2020-9948.md): A type confusion issue was addressed with improved memory handling. (no CVSS, Apple Safari)
- [CVE-2020-9936](https://cve.now/CVE-2020-9936.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +4)
- [CVE-2020-9934](https://cve.now/CVE-2020-9934.md): An issue existed in the handling of environment variables. (CVSS 5.5, KEV, Apple iOS · Apple macOS)
- [CVE-2020-9933](https://cve.now/CVE-2020-9933.md): An authorization issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-15258](https://cve.now/CVE-2020-15258.md): Insecure use of shell.openExternal in Wire (CVSS 8.0, wireapp wire-desktop)
- [CVE-2020-9931](https://cve.now/CVE-2020-9931.md): A denial of service issue was addressed with improved input validation. (no CVSS, Apple iOS)
- [CVE-2020-9925](https://cve.now/CVE-2020-9925.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9923](https://cve.now/CVE-2020-9923.md): A memory corruption issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple watchOS)
- [CVE-2020-9918](https://cve.now/CVE-2020-9918.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple macOS · Apple tvOS +1)
- [CVE-2020-9917](https://cve.now/CVE-2020-9917.md): This issue was addressed with improved checks. (no CVSS, Apple iOS)
- [CVE-2020-9916](https://cve.now/CVE-2020-9916.md): A URL Unicode encoding issue was addressed with improved state management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9915](https://cve.now/CVE-2020-9915.md): An access issue existed in Content Security Policy. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9914](https://cve.now/CVE-2020-9914.md): An input validation issue existed in Bluetooth. (no CVSS, Apple iOS · Apple tvOS)
- [CVE-2020-9913](https://cve.now/CVE-2020-9913.md): This issue was addressed with improved data protection. (no CVSS, Apple macOS)
- [CVE-2020-15157](https://cve.now/CVE-2020-15157.md): containerd can be coerced into leaking credentials during image pull (CVSS 6.1, containerd · github.com/containerd/containerd)
- [CVE-2020-9912](https://cve.now/CVE-2020-9912.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple Safari)
- [CVE-2020-9911](https://cve.now/CVE-2020-9911.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2020-9910](https://cve.now/CVE-2020-9910.md): Multiple issues were addressed with improved logic. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9909](https://cve.now/CVE-2020-9909.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple tvOS +1)
- [CVE-2020-9907](https://cve.now/CVE-2020-9907.md): A memory corruption issue was addressed by removing the vulnerable code. (CVSS 7.8, KEV, Apple iOS · Apple tvOS)
- [CVE-2020-9903](https://cve.now/CVE-2020-9903.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple iOS · Apple Safari)
- [CVE-2020-9895](https://cve.now/CVE-2020-9895.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9894](https://cve.now/CVE-2020-9894.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-4636](https://cve.now/CVE-2020-4636.md): IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. (CVSS 8.2, IBM Resilient OnPrem)
- [CVE-2020-4254](https://cve.now/CVE-2020-4254.md): IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to (CVSS 5.9, IBM Security Guardium Big Data Intelligence)
- [CVE-2020-9893](https://cve.now/CVE-2020-9893.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-9891](https://cve.now/CVE-2020-9891.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9890](https://cve.now/CVE-2020-9890.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9889](https://cve.now/CVE-2020-9889.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9888](https://cve.now/CVE-2020-9888.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9885](https://cve.now/CVE-2020-9885.md): An issue existed in the handling of iMessage tapbacks. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9884](https://cve.now/CVE-2020-9884.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9878](https://cve.now/CVE-2020-9878.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9870](https://cve.now/CVE-2020-9870.md): A logic issue was addressed with improved validation. (no CVSS, Apple iOS · Apple macOS +1)
- [CVE-2020-9865](https://cve.now/CVE-2020-9865.md): A memory corruption issue was addressed by removing the vulnerable code. (no CVSS, Apple iOS · Apple macOS +2)
- [CVE-2020-9864](https://cve.now/CVE-2020-9864.md): A logic issue was addressed with improved restrictions. (no CVSS, Apple macOS)
- [CVE-2020-9862](https://cve.now/CVE-2020-9862.md): A command injection issue existed in Web Inspector. (no CVSS, Apple iOS · Apple tvOS +4)
- [CVE-2020-15255](https://cve.now/CVE-2020-15255.md): CSV injection in Anuko Time Tracker (CVSS 8.7, anuko timetracker)
- [CVE-2020-9799](https://cve.now/CVE-2020-9799.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-27178](https://cve.now/CVE-2020-27178.md): Apereo CAS 5.3.x before 5.3.16, 6.x before 6.1.7.2, 6.2.x before 6.2.4, and 6.3.x before 6.3.0-RC4 mishandles secret keys with Google Authen (no CVSS, org.apereo.cas:cas-server-webapp · org.apereo.cas:cas-serve…)
- [CVE-2020-26672](https://cve.now/CVE-2020-26672.md): Testimonial Rotator Wordpress Plugin 3.0.2 is affected by Cross Site Scripting (XSS) in /wp-admin/post.php. (no CVSS)
- [CVE-2020-24408](https://cve.now/CVE-2020-24408.md): Stored XSS in customer address upload feature (CVSS 6.1, Adobe Magento Commerce · magento/community-edition)
- [CVE-2020-26682](https://cve.now/CVE-2020-26682.md): In libass 0.14.0, the \`ass\_outline\_construct\`'s call to \`outline\_stroke\` causes a signed integer overflow. (no CVSS)
- [CVE-2020-3991](https://cve.now/CVE-2020-3991.md): VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue du (no CVSS, VMware Horizon Client for Windows)
- [CVE-2020-26944](https://cve.now/CVE-2020-26944.md): An issue was discovered in Aptean Product Configurator 4.61.0000 on Windows. (no CVSS)
- [CVE-2020-14299](https://cve.now/CVE-2020-14299.md): A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy Picket (no CVSS, picketbox)
- [CVE-2020-16270](https://cve.now/CVE-2020-16270.md): OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. (no CVSS)
- [CVE-2020-15867](https://cve.now/CVE-2020-15867.md): The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remote code execution. (no CVSS)
- [CVE-2020-14144](https://cve.now/CVE-2020-14144.md): The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the do (no CVSS, code.gitea.io/gitea)
- [CVE-2019-19885](https://cve.now/CVE-2019-19885.md): In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. (no CVSS)
- [CVE-2020-26893](https://cve.now/CVE-2020-26893.md): An issue was discovered in ClamXAV 3 before 3.1.1. (no CVSS)
- [CVE-2019-19513](https://cve.now/CVE-2019-19513.md): The BASSMIDI plugin 2.4.12.1 for Un4seen BASS Audio Library on Windows is prone to an out of bounds write vulnerability. (no CVSS)
- [CVE-2019-18796](https://cve.now/CVE-2019-18796.md): The BASS Audio Library 2.4.14 under Windows is prone to a BASS\_StreamCreateFile Denial of Service vulnerability (infinite loop) via a crafte (no CVSS)
- [CVE-2019-18795](https://cve.now/CVE-2019-18795.md): The BASS Audio Library 2.4.14 under Windows is prone to a BASS\_StreamCreateFile out of bounds read vulnerability via a crafted .wav file. (no CVSS)
- [CVE-2019-18794](https://cve.now/CVE-2019-18794.md): The BASS Audio Library 2.4.14 under Windows is prone to a BASS\_StreamCreateFile Use after Free vulnerability via a crafted .ogg file. (no CVSS)
- [CVE-2020-26943](https://cve.now/CVE-2020-26943.md): An issue was discovered in OpenStack blazar-dashboard before 1.3.1, 2.0.0, and 3.0.0. (no CVSS, blazar-dashboard)
- [CVE-2020-26584](https://cve.now/CVE-2020-26584.md): An issue was discovered in Sage DPW 2020\_06\_x before 2020\_06\_002. (no CVSS)
- [CVE-2020-26583](https://cve.now/CVE-2020-26583.md): An issue was discovered in Sage DPW 2020\_06\_x before 2020\_06\_002. (no CVSS)
- [CVE-2020-25829](https://cve.now/CVE-2020-25829.md): An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. (no CVSS)
- [CVE-2020-24352](https://cve.now/CVE-2020-24352.md): An issue was discovered in QEMU through 5.1.0. (no CVSS)
- [CVE-2020-27176](https://cve.now/CVE-2020-27176.md): Mutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. (CVSS 8.3)
- [CVE-2020-27174](https://cve.now/CVE-2020-27174.md): In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when da (no CVSS)
- [CVE-2020-27173](https://cve.now/CVE-2020-27173.md): In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard (no CVSS)
- [CVE-2020-27163](https://cve.now/CVE-2020-27163.md): phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter. (no CVSS)
- [CVE-2020-16947](https://cve.now/CVE-2020-16947.md): Microsoft Outlook Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Office · Microsoft 365 Apps for Enterprise +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.