# CVEs published 2020-10-28

58 CVEs were published on October 28, 2020: 1 critical, 5 high. 4 are now in CISA KEV. Days are UTC.

- [CVE-2020-27986](https://cve.now/CVE-2020-27986.md): SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. (CVSS 7.5)
- [CVE-2020-25374](https://cve.now/CVE-2020-25374.md): CyberArk Privileged Session Manager (PSM) 10.9.0.15 allows attackers to discover internal pathnames by reading an error popup message after (no CVSS)
- [CVE-2020-24707](https://cve.now/CVE-2020-24707.md): Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content. (no CVSS)
- [CVE-2020-24713](https://cve.now/CVE-2020-24713.md): Gophish through 0.10.1 does not invalidate the gophish cookie upon logout. (no CVSS)
- [CVE-2020-24711](https://cve.now/CVE-2020-24711.md): The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking atta (no CVSS)
- [CVE-2020-24710](https://cve.now/CVE-2020-24710.md): Gophish before 0.11.0 allows SSRF attacks. (no CVSS, github.com/gophish/gophish)
- [CVE-2020-24712](https://cve.now/CVE-2020-24712.md): Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page. (no CVSS)
- [CVE-2020-24709](https://cve.now/CVE-2020-24709.md): Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template. (no CVSS)
- [CVE-2020-24708](https://cve.now/CVE-2020-24708.md): Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form. (no CVSS)
- [CVE-2020-24990](https://cve.now/CVE-2020-24990.md): An issue was discovered in QSC Q-SYS Core Manager 8.2.1. (no CVSS)
- [CVE-2020-25204](https://cve.now/CVE-2020-25204.md): The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.rec (no CVSS)
- [CVE-2020-27980](https://cve.now/CVE-2020-27980.md): Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. (no CVSS)
- [CVE-2020-27739](https://cve.now/CVE-2020-27739.md): A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in u (no CVSS)
- [CVE-2020-27742](https://cve.now/CVE-2020-27742.md): An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's (no CVSS)
- [CVE-2020-27741](https://cve.now/CVE-2020-27741.md): Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2020-27740](https://cve.now/CVE-2020-27740.md): Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. (no CVSS)
- [CVE-2018-19943](https://cve.now/CVE-2018-19943.md): If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. (CVSS 8.0, KEV, QNAP Systems QTS)
- [CVE-2018-19949](https://cve.now/CVE-2018-19949.md): If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. (CVSS 9.8, KEV, QNAP Systems QTS)
- [CVE-2018-19953](https://cve.now/CVE-2018-19953.md): If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. (CVSS 6.1, KEV, QNAP Systems QTS)
- [CVE-2020-25966](https://cve.now/CVE-2020-25966.md): Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured assets without proper (no CVSS)
- [CVE-2020-16259](https://cve.now/CVE-2020-16259.md): Winston 1.5.4 devices have an SSH user account with access from bastion hosts. (no CVSS)
- [CVE-2020-16258](https://cve.now/CVE-2020-16258.md): Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials. (no CVSS)
- [CVE-2020-16260](https://cve.now/CVE-2020-16260.md): Winston 1.5.4 devices do not enforce authorization. (no CVSS)
- [CVE-2020-16263](https://cve.now/CVE-2020-16263.md): Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. (no CVSS)
- [CVE-2020-16262](https://cve.now/CVE-2020-16262.md): Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation. (no CVSS)
- [CVE-2020-16261](https://cve.now/CVE-2020-16261.md): Winston 1.5.4 devices allow a U-Boot interrupt, resulting in local root access. (no CVSS)
- [CVE-2020-16256](https://cve.now/CVE-2020-16256.md): The API on Winston 1.5.4 devices is vulnerable to CSRF. (no CVSS)
- [CVE-2020-16257](https://cve.now/CVE-2020-16257.md): Winston 1.5.4 devices are vulnerable to command injection via the API. (no CVSS)
- [CVE-2020-15278](https://cve.now/CVE-2020-15278.md): Unauthorized privilege escalation in Mod module (CVSS 7.7, Cog-Creators Red-DiscordBot · red-discordbot)
- [CVE-2020-4782](https://cve.now/CVE-2020-4782.md): IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. (CVSS 6.5, IBM WebSphere Application Server)
- [CVE-2020-4767](https://cve.now/CVE-2020-4767.md): IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused (CVSS 7.5, IBM Sterling Connect Direct for Microsoft Windows)
- [CVE-2020-27978](https://cve.now/CVE-2020-27978.md): Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. (no CVSS)
- [CVE-2020-27974](https://cve.now/CVE-2020-27974.md): NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS\_SCM\_BlockStart.php?code= XSS. (no CVSS)
- [CVE-2020-27975](https://cve.now/CVE-2020-27975.md): osCommerce Phoenix CE before 1.0.5.4 allows admin/define\_language.php CSRF. (no CVSS)
- [CVE-2020-27976](https://cve.now/CVE-2020-27976.md): osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. (no CVSS)
- [CVE-2020-22552](https://cve.now/CVE-2020-22552.md): The Snap7 server component in version 1.4.1, when an attacker sends a crafted packet with COTP protocol the last-data-unit flag set to No an (no CVSS)
- [CVE-2020-24303](https://cve.now/CVE-2020-24303.md): Grafana before 7.1.0-beta 1 allows XSS via a query alias for the ElasticSearch datasource. (no CVSS, github.com/grafana/grafana)
- [CVE-2020-8263](https://cve.now/CVE-2020-8263.md): A vulnerability in the authenticated user web interface of Pulse Connect Secure \< 9.1R9 could allow attackers to conduct Cross-Site Scriptin (no CVSS, Pulse Connect Secure / Pulse Policy Secure)
- [CVE-2020-8262](https://cve.now/CVE-2020-8262.md): A vulnerability in the Pulse Connect Secure / Pulse Policy Secure below 9.1R9 could allow attackers to conduct Cross-Site Scripting (XSS) an (no CVSS, Pulse Connect Secure / Pulse Policy Secure)
- [CVE-2020-8261](https://cve.now/CVE-2020-8261.md): A vulnerability in the Pulse Connect Secure / Pulse Policy Secure \< 9.1R9 is vulnerable to arbitrary cookie injection. (no CVSS, Pulse Connect Secure / Pulse Policy Secure)
- [CVE-2020-8260](https://cve.now/CVE-2020-8260.md): A vulnerability in the Pulse Connect Secure \< 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code e (CVSS 7.2, KEV, Pulse Connect Secure / Pulse Policy Secure)
- [CVE-2020-8241](https://cve.now/CVE-2020-8241.md): A vulnerability in the Pulse Secure Desktop Client \< 9.1R9 could allow the attacker to perform a MITM Attack if end users are convinced to c (no CVSS, Pulse Secure Dektop Client)
- [CVE-2020-8255](https://cve.now/CVE-2020-8255.md): A vulnerability in the Pulse Connect Secure \< 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary file r (no CVSS, Pulse Connect Secure / Pulse Policy Secure)
- [CVE-2020-8239](https://cve.now/CVE-2020-8239.md): A vulnerability in the Pulse Secure Desktop Client \< 9.1R9 is vulnerable to the client registry privilege escalation attack. (no CVSS, Pulse Secure Desktop Cient)
- [CVE-2020-8254](https://cve.now/CVE-2020-8254.md): A vulnerability in the Pulse Secure Desktop Client \< 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicio (no CVSS, Pulse Secure Desktop Client)
- [CVE-2020-8240](https://cve.now/CVE-2020-8240.md): A vulnerability in the Pulse Secure Desktop Client \< 9.1R9 allows a restricted user on an endpoint machine can use system-level privileges i (no CVSS, Pulse Secure Desktop Client)
- [CVE-2020-8250](https://cve.now/CVE-2020-8250.md): A vulnerability in the Pulse Secure Desktop Client (Linux) \< 9.1R9 could allow local attackers to escalate privilege. (no CVSS, Pulse Secure Desktop Client)
- [CVE-2020-8249](https://cve.now/CVE-2020-8249.md): A vulnerability in the Pulse Secure Desktop Client (Linux) \< 9.1R9 could allow local attackers to perform buffer overflow. (no CVSS, Pulse Secure Desktop Client)
- [CVE-2020-8248](https://cve.now/CVE-2020-8248.md): A vulnerability in the Pulse Secure Desktop Client (Linux) \< 9.1R9 could allow local attackers to escalate privilege. (no CVSS, Pulse Secure Desktop Client)
- [CVE-2020-5144](https://cve.now/CVE-2020-5144.md): SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded (no CVSS, SonicWall Global VPN Client)
- [CVE-2020-5145](https://cve.now/CVE-2020-5145.md): SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. (no CVSS, SonicWall Global VPN Client)
- [CVE-2020-27957](https://cve.now/CVE-2020-27957.md): The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. (no CVSS)
- [CVE-2020-27956](https://cve.now/CVE-2020-27956.md): An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote (no CVSS)
- [CVE-2020-26130](https://cve.now/CVE-2020-26130.md): Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. (no CVSS)
- [CVE-2020-26131](https://cve.now/CVE-2020-26131.md): Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. (no CVSS)
- [CVE-2020-26132](https://cve.now/CVE-2020-26132.md): An issue was discovered in Home DNS Server 0.10. (no CVSS)
- [CVE-2020-26133](https://cve.now/CVE-2020-26133.md): An issue was discovered in Dual DHCP DNS Server 7.40. (no CVSS)
- [CVE-2020-6829](https://cve.now/CVE-2020-6829.md): When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the (no CVSS, Mozilla Firefox)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-10-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.