# CVEs published 2020-11-01

8 CVEs were published on November 1, 2020: 1 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-14750](https://cve.now/CVE-2020-14750.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-28044](https://cve.now/CVE-2020-28044.md): An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable th (no CVSS)
- [CVE-2020-28045](https://cve.now/CVE-2020-28045.md): An unsigned-library issue was discovered in ProlinOS through 2.4.161.8859R. (no CVSS)
- [CVE-2020-28046](https://cve.now/CVE-2020-28046.md): An issue was discovered in ProlinOS through 2.4.161.8859R. (no CVSS)
- [CVE-2020-25849](https://cve.now/CVE-2020-25849.md): Openfind MailGates/MailAudit - Command Injection (CVSS 8.8, Openfind MailGates · Openfind MailAudit)
- [CVE-2020-28043](https://cve.now/CVE-2020-28043.md): MISP through 2.4.133 allows SSRF in the REST client via the use\_full\_path parameter with an arbitrary URL. (no CVSS)
- [CVE-2020-28042](https://cve.now/CVE-2020-28042.md): ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a (no CVSS, ServiceStack)
- [CVE-2020-28041](https://cve.now/CVE-2020-28041.md): The SIP ALG implementation on NETGEAR Nighthawk R7000 1.0.9.64\_10.2.64 devices allows remote attackers to communicate with arbitrary TCP and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.