# CVEs published 2020-11-10

58 CVEs were published on November 10, 2020: 7 critical, 4 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-25268](https://cve.now/CVE-2020-25268.md): Remote Code Execution can occur via the external news feed in ILIAS 6.4 because of incorrect parameter sanitization for Magpie RSS data. (no CVSS)
- [CVE-2020-25267](https://cve.now/CVE-2020-25267.md): An XSS issue exists in the question-pool file-upload preview feature in ILIAS 6.4. (no CVSS)
- [CVE-2020-24367](https://cve.now/CVE-2020-24367.md): Incorrect file permissions in BlueStacks 4 through 4.230 on Windows allow a local attacker to escalate privileges by modifying a file that i (no CVSS)
- [CVE-2020-28408](https://cve.now/CVE-2020-28408.md): The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. (no CVSS)
- [CVE-2020-28409](https://cve.now/CVE-2020-28409.md): The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. (no CVSS)
- [CVE-2020-24063](https://cve.now/CVE-2020-24063.md): The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. (no CVSS)
- [CVE-2019-7357](https://cve.now/CVE-2019-7357.md): Subrion CMS 4.2.1 has CSRF in panel/modules/plugins/. (no CVSS, intelliants/subrion)
- [CVE-2020-23968](https://cve.now/CVE-2020-23968.md): Ilex International Sign&go Workstation Security Suite 7.1 allows elevation of privileges via a symlink attack on ProgramData\\Ilex\\S&G\\Logs\\0 (no CVSS)
- [CVE-2020-28368](https://cve.now/CVE-2020-28368.md): Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-chann (no CVSS)
- [CVE-2020-28055](https://cve.now/CVE-2020-28055.md): A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group C (no CVSS)
- [CVE-2020-27146](https://cve.now/CVE-2020-27146.md): TIBCO iProcess Workspace Browser CSRF (CVSS 5.0, TIBCO Software TIBCO iProcess Workspace)
- [CVE-2020-27403](https://cve.now/CVE-2020-27403.md): A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group C (no CVSS)
- [CVE-2020-25074](https://cve.now/CVE-2020-25074.md): The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. (no CVSS, moin)
- [CVE-2020-26807](https://cve.now/CVE-2020-26807.md): SAP ERP Client for E-Bilanz, version - 1.0, installation sets Incorrect default filesystem permissions are set in its installation folder wh (CVSS 4.4, SAP SE SAP ERP Client for E-Bilanz)
- [CVE-2020-26810](https://cve.now/CVE-2020-26810.md): SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted req (CVSS 7.5, SAP SE SAP Commerce Cloud)
- [CVE-2020-26823](https://cve.now/CVE-2020-26823.md): SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorizat (CVSS 10.0, SAP SE SAP Solution Manager)
- [CVE-2020-26821](https://cve.now/CVE-2020-26821.md): SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorizat (CVSS 10.0, SAP SE SAP Solution Manager)
- [CVE-2020-26818](https://cve.now/CVE-2020-26818.md): SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpr (CVSS 6.5, SAP SE SAP NetWeaver AS ABAP)
- [CVE-2020-26824](https://cve.now/CVE-2020-26824.md): SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorizat (CVSS 10.0, SAP SE SAP Solution Manager)
- [CVE-2020-26817](https://cve.now/CVE-2020-26817.md): SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in (CVSS 4.3, SAP SE SAP 3D Visual Enterprise Viewer)
- [CVE-2020-26822](https://cve.now/CVE-2020-26822.md): SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorizat (CVSS 10.0, SAP SE SAP Solution Manager)
- [CVE-2020-26814](https://cve.now/CVE-2020-26814.md): SAP Process Integration (PGP Module - Business-to-Business Add On), version - 1.0, allows an attacker to read PGP Keys under certain conditi (CVSS 4.9, SAP SE SAP Process Integration)
- [CVE-2020-26820](https://cve.now/CVE-2020-26820.md): SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the admin (CVSS 9.1, SAP SE SAP NetWeaver AS JAVA)
- [CVE-2020-26819](https://cve.now/CVE-2020-26819.md): SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpr (CVSS 5.4, SAP SE SAP NetWeaver AS ABAP)
- [CVE-2020-26815](https://cve.now/CVE-2020-26815.md): SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request t (CVSS 8.6, SAP SE SAP Fiori Launchpad)
- [CVE-2020-26808](https://cve.now/CVE-2020-26808.md): SAP AS ABAP(DMIS), versions - 2011\_1\_620, 2011\_1\_640, 2011\_1\_700, 2011\_1\_710, 2011\_1\_730, 2011\_1\_731, 2011\_1\_752, 2020 and SAP S4 HANA(DMIS) (CVSS 9.1, SAP SE SAP AS ABAP · SAP SE SAP S4 HANA)
- [CVE-2020-26811](https://cve.now/CVE-2020-26811.md): SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted req (CVSS 5.3, SAP SE SAP Commerce Cloud)
- [CVE-2020-6316](https://cve.now/CVE-2020-6316.md): SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leadi (CVSS 4.3, SAP SE SAP ERP · SAP SE SAP S/4 HANA)
- [CVE-2020-26809](https://cve.now/CVE-2020-26809.md): SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an attacker to bypass existing authentication and permission checks via the '/medi (CVSS 5.3, SAP SE SAP Commerce Cloud)
- [CVE-2020-28267](https://cve.now/CVE-2020-28267.md): Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote co (no CVSS, @strikeentco/set)
- [CVE-2020-7766](https://cve.now/CVE-2020-7766.md): Prototype Pollution (CVSS 7.3, json-ptr)
- [CVE-2020-12485](https://cve.now/CVE-2020-12485.md): The frame touch module does not make validity judgments on parameter lengths when processing specific parameters,which caused out of the bou (CVSS 5.5, vivo The frame touch module)
- [CVE-2020-4760](https://cve.now/CVE-2020-4760.md): IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. (CVSS 5.4, IBM Content Navigator)
- [CVE-2020-4704](https://cve.now/CVE-2020-4704.md): IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Content Navigator)
- [CVE-2020-4568](https://cve.now/CVE-2020-4568.md): IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, and 4.0 stores user credentials in plain in clear text which can be read by a local user. (CVSS 6.3, IBM Security Key Lifecycle Manager)
- [CVE-2020-5388](https://cve.now/CVE-2020-5388.md): Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. (CVSS 6.9, Dell CPG BIOS)
- [CVE-2020-24384](https://cve.now/CVE-2020-24384.md): A10 Networks ACOS and aGalaxy management Graphical User Interfaces (GUIs) have an unauthenticated Remote Code Execution (RCE) vulnerability (no CVSS)
- [CVE-2020-0446](https://cve.now/CVE-2020-0446.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264528 (no CVSS, Android)
- [CVE-2020-0445](https://cve.now/CVE-2020-0445.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168264527 (no CVSS, Android)
- [CVE-2020-0447](https://cve.now/CVE-2020-0447.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-168251617 (no CVSS, Android)
- [CVE-2020-0437](https://cve.now/CVE-2020-0437.md): In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0449](https://cve.now/CVE-2020-0449.md): In btm\_sec\_disconnected of btm\_sec.cc, there is a possible memory corruption due to a use after free. (no CVSS, Android)
- [CVE-2020-0438](https://cve.now/CVE-2020-0438.md): In the AIBinder\_Class constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0454](https://cve.now/CVE-2020-0454.md): In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Android)
- [CVE-2020-0424](https://cve.now/CVE-2020-0424.md): In send\_vc of res\_send.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2020-0453](https://cve.now/CVE-2020-0453.md): In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to an unsafe PendingIntent. (no CVSS, Android)
- [CVE-2020-0452](https://cve.now/CVE-2020-0452.md): In exif\_entry\_get\_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0451](https://cve.now/CVE-2020-0451.md): In sbrDecoder\_AssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2020-0441](https://cve.now/CVE-2020-0441.md): In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. (no CVSS, Android)
- [CVE-2020-0450](https://cve.now/CVE-2020-0450.md): In rw\_i93\_sm\_format of rw\_i93.cc, there is a possible out of bounds read due to uninitialized data. (no CVSS, Android)
- [CVE-2020-0409](https://cve.now/CVE-2020-0409.md): In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2020-0448](https://cve.now/CVE-2020-0448.md): In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permissio (no CVSS, Android)
- [CVE-2020-0418](https://cve.now/CVE-2020-0418.md): In getPermissionInfosForGroup of Utils.java, there is a logic error. (no CVSS, Android)
- [CVE-2020-0443](https://cve.now/CVE-2020-0443.md): In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. (no CVSS, Android)
- [CVE-2020-0442](https://cve.now/CVE-2020-0442.md): In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. (no CVSS, Android)
- [CVE-2020-0439](https://cve.now/CVE-2020-0439.md): In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. (no CVSS, Android)
- [CVE-2020-16125](https://cve.now/CVE-2020-16125.md): gdm3 would start gnome-initial-setup if it cannot contact accountservice (CVSS 7.2, Gnome GDM3)
- [CVE-2020-13927](https://cve.now/CVE-2020-13927.md): The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security ri (CVSS 9.8, KEV, Apache Airflow · apache-airflow)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.