# CVEs published 2020-11-12

158 CVEs were published on November 12, 2020: 0 critical, 9 high. Days are UTC.

- [CVE-2020-7033](https://cve.now/CVE-2020-7033.md): Avaya Equinox Conferencing XSS (CVSS 6.3, Avaya Equinox Conferencing)
- [CVE-2020-17494](https://cve.now/CVE-2020-17494.md): Untangle Firewall NG before 16.0 uses MD5 for passwords. (no CVSS)
- [CVE-2020-24719](https://cve.now/CVE-2020-24719.md): Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. (no CVSS)
- [CVE-2020-27193](https://cve.now/CVE-2020-27193.md): A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web scrip (no CVSS, ckeditor4)
- [CVE-2020-13877](https://cve.now/CVE-2020-13877.md): SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclos (no CVSS)
- [CVE-2020-28414](https://cve.now/CVE-2020-28414.md): A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. (no CVSS)
- [CVE-2020-28415](https://cve.now/CVE-2020-28415.md): A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. (no CVSS)
- [CVE-2020-13774](https://cve.now/CVE-2020-13774.md): An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker (no CVSS)
- [CVE-2020-15783](https://cve.now/CVE-2020-15783.md): A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. (CVSS 7.5, Siemens SIMATIC S7-300 CPU family · Siemens SIMATIC TDC… +1)
- [CVE-2020-12927](https://cve.now/CVE-2020-12927.md): A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privil (no CVSS, AMD VBIOS Flash Tool SDK)
- [CVE-2020-12912](https://cve.now/CVE-2020-12912.md): A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power L (no CVSS, AMD extension to Linux "hwmon" for Zen1 platforms)
- [CVE-2020-12926](https://cve.now/CVE-2020-12926.md): The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. (no CVSS, AMD's fTPM implementation)
- [CVE-2020-24460](https://cve.now/CVE-2020-24460.md): Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of s (no CVSS, Intel(R) DSA)
- [CVE-2020-24456](https://cve.now/CVE-2020-24456.md): Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation (no CVSS, Intel(R) Board ID Tool)
- [CVE-2020-24454](https://cve.now/CVE-2020-24454.md): Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) (no CVSS, Intel(R) Quartus(R) Prime Pro Edition and Intel(R) Quartus(…)
- [CVE-2020-0572](https://cve.now/CVE-2020-0572.md): Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially (no CVSS, Intel(R) Server Board S2600ST and S2600WF families)
- [CVE-2020-12346](https://cve.now/CVE-2020-12346.md): Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to (no CVSS, Intel(R) Battery Life Diagnostic Tool)
- [CVE-2020-12349](https://cve.now/CVE-2020-12349.md): Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en (no CVSS, Intel(R) Data Center Manager Console)
- [CVE-2020-12353](https://cve.now/CVE-2020-12353.md): Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable (no CVSS, Intel(R) Data Center Manager Console)
- [CVE-2020-12345](https://cve.now/CVE-2020-12345.md): Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to p (no CVSS, Intel(R) Data Center Manager Console)
- [CVE-2020-8669](https://cve.now/CVE-2020-8669.md): Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en (no CVSS, Intel(R) Data Center Manager Console)
- [CVE-2020-12347](https://cve.now/CVE-2020-12347.md): Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially en (no CVSS, Intel(R) Data Center Manager Console)
- [CVE-2020-12350](https://cve.now/CVE-2020-12350.md): Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of pri (no CVSS, Intel(R) XTU)
- [CVE-2020-0573](https://cve.now/CVE-2020-0573.md): Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via (no CVSS, Intel CSI2 Host Controller driver)
- [CVE-2020-16273](https://cve.now/CVE-2020-16273.md): In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow a (no CVSS)
- [CVE-2020-26803](https://cve.now/CVE-2020-26803.md): In Sentrifugo 3.2, users can upload an image under "Assets -\> Add" tab. (no CVSS)
- [CVE-2020-26804](https://cve.now/CVE-2020-26804.md): In Sentrifugo 3.2, users can share an announcement under "Organization -\> Announcements" tab. (no CVSS)
- [CVE-2020-26805](https://cve.now/CVE-2020-26805.md): In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --\> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. (no CVSS)
- [CVE-2020-12329](https://cve.now/CVE-2020-12329.md): Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enab (no CVSS, Intel(R) VTune(TM) Profiler)
- [CVE-2020-12326](https://cve.now/CVE-2020-12326.md): Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows\* before version 72 may allow an authenticated user to poten (no CVSS, Intel(R) Thunderbolt(TM) DCH drivers for Windows\*)
- [CVE-2020-12327](https://cve.now/CVE-2020-12327.md): Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows\* before version 72 may allow a privileged (no CVSS, Intel(R) Thunderbolt(TM) DCH drivers for Windows\*)
- [CVE-2020-12328](https://cve.now/CVE-2020-12328.md): Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows\* before version 72 may allow a privileged user to pote (no CVSS, Intel(R) Thunderbolt(TM) DCH drivers for Windows\*)
- [CVE-2020-27385](https://cve.now/CVE-2020-27385.md): Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacke (no CVSS)
- [CVE-2020-12324](https://cve.now/CVE-2020-12324.md): Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows\* before version 72 may allow an authenticated user to (no CVSS, Intel(R) Thunderbolt(TM) DCH drivers for Windows\*)
- [CVE-2020-12325](https://cve.now/CVE-2020-12325.md): Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows\* before version 72 may allow an authenticated user to (no CVSS, Intel(R) Thunderbolt(TM) DCH drivers for Windows\*)
- [CVE-2020-12332](https://cve.now/CVE-2020-12332.md): Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentially (no CVSS, Intel(R) HID Event Filter Driver)
- [CVE-2020-12333](https://cve.now/CVE-2020-12333.md): Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentiall (no CVSS, Intel(R) QAT for Linux)
- [CVE-2020-12335](https://cve.now/CVE-2020-12335.md): Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated u (no CVSS, Intel(R) Processor Identification Utility)
- [CVE-2020-12331](https://cve.now/CVE-2020-12331.md): Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enab (no CVSS, Intel Unite(R) Cloud Service client)
- [CVE-2020-12334](https://cve.now/CVE-2020-12334.md): Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potenti (no CVSS, Intel(R) Advisor tools)
- [CVE-2020-12330](https://cve.now/CVE-2020-12330.md): Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to (no CVSS, all versions)
- [CVE-2020-12323](https://cve.now/CVE-2020-12323.md): Improper input validation in the Intel(R) ADAS IE before version ADAS\_IE\_1.0.766 may allow a privileged user to potentially enable escalatio (no CVSS, Intel(R) ADAS IE)
- [CVE-2020-24525](https://cve.now/CVE-2020-24525.md): Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalati (no CVSS, Intel(R) NUCs)
- [CVE-2020-12337](https://cve.now/CVE-2020-12337.md): Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege vi (no CVSS, Intel(R) NUCs)
- [CVE-2020-12336](https://cve.now/CVE-2020-12336.md): Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation (no CVSS, Intel(R) NUCs)
- [CVE-2020-12320](https://cve.now/CVE-2020-12320.md): Uncontrolled search path in Intel(R) SCS Add-on for Microsoft\* SCCM before version 2.1.10 may allow an authenticated user to potentially ena (no CVSS, Intel(R) SCS Add-on for Microsoft\* SCCM)
- [CVE-2020-27386](https://cve.now/CVE-2020-27386.md): An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary fil (no CVSS)
- [CVE-2020-12316](https://cve.now/CVE-2020-12316.md): Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information (no CVSS, Intel(R) EMA)
- [CVE-2020-12315](https://cve.now/CVE-2020-12315.md): Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via (no CVSS, Intel(R) EMA)
- [CVE-2020-12308](https://cve.now/CVE-2020-12308.md): Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially (no CVSS, Intel(R) Computing Improvement Program)
- [CVE-2020-12307](https://cve.now/CVE-2020-12307.md): Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticated user to potential (no CVSS, Intel(R) High Definition Audio drivers)
- [CVE-2020-12306](https://cve.now/CVE-2020-12306.md): Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, may allow an authentic (no CVSS, Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool)
- [CVE-2020-12322](https://cve.now/CVE-2020-12322.md): Improper input validation in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potenti (no CVSS, Intel(R) Wireless Bluetooth)
- [CVE-2020-12321](https://cve.now/CVE-2020-12321.md): Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to poten (no CVSS, Intel(R) Wireless Bluetooth)
- [CVE-2020-12319](https://cve.now/CVE-2020-12319.md): Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user (no CVSS, Intel(R) PROSet/Wireless WiFi)
- [CVE-2020-12317](https://cve.now/CVE-2020-12317.md): Improper buffer restriction in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potent (no CVSS, Intel(R) PROSet/Wireless WiFi)
- [CVE-2020-12318](https://cve.now/CVE-2020-12318.md): Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authenticated user to potenti (no CVSS, Intel(R) PROSet/Wireless WiFi)
- [CVE-2020-12314](https://cve.now/CVE-2020-12314.md): Improper input validation in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentia (no CVSS, Intel(R) PROSet/Wireless WiFi)
- [CVE-2020-8767](https://cve.now/CVE-2020-8767.md): Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potential (no CVSS, Intel(R) 50GbE IP Core for Intel(R) Quartus Prime)
- [CVE-2020-8766](https://cve.now/CVE-2020-8766.md): Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denia (no CVSS, Intel(R) SGX DCAP software)
- [CVE-2020-8749](https://cve.now/CVE-2020-8749.md): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticat (no CVSS, Intel(R) AMT)
- [CVE-2020-8746](https://cve.now/CVE-2020-8746.md): Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated (no CVSS, Intel(R) AMT)
- [CVE-2020-12356](https://cve.now/CVE-2020-12356.md): Out-of-bounds read in subsystem in Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged user (no CVSS, Intel(R) AMT)
- [CVE-2020-8755](https://cve.now/CVE-2020-8755.md): Race condition in subsystem for Intel(R) CSME versions before 12.0.70 and 14.0.45, Intel(R) SPS versions before E5\_04.01.04.400 and E3\_05.01 (no CVSS, Intel(R) CSME, Intel(R) SPS)
- [CVE-2020-8747](https://cve.now/CVE-2020-8747.md): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticat (no CVSS, Intel(R) AMT)
- [CVE-2020-8761](https://cve.now/CVE-2020-8761.md): Inadequate encryption strength in subsystem for Intel(R) CSME versions before 13.0.40 and 13.30.10 may allow an unauthenticated user to pote (no CVSS, Intel(R) CSME)
- [CVE-2020-8754](https://cve.now/CVE-2020-8754.md): Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an (no CVSS, Intel(R) AMT, Intel(R) ISM)
- [CVE-2020-8751](https://cve.now/CVE-2020-8751.md): Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, Intel(R) TXE versions before 3.1.80 may allow a (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2020-12355](https://cve.now/CVE-2020-12355.md): Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in Intel(R) TXE versions before 4.0.30 may allow a (no CVSS, Intel(R) TXE)
- [CVE-2020-8760](https://cve.now/CVE-2020-8760.md): Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a privileged user to (no CVSS, Intel(R) AMT)
- [CVE-2020-8756](https://cve.now/CVE-2020-8756.md): Improper input validation in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privil (no CVSS, Intel(R) CSME)
- [CVE-2020-8757](https://cve.now/CVE-2020-8757.md): Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow a privileged use (no CVSS, Intel(R) AMT)
- [CVE-2020-12354](https://cve.now/CVE-2020-12354.md): Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potent (no CVSS, Intel(R) AMT SDK)
- [CVE-2020-12303](https://cve.now/CVE-2020-12303.md): Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5. (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2020-8750](https://cve.now/CVE-2020-8750.md): Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enabl (no CVSS, Intel(R) TXE)
- [CVE-2020-8705](https://cve.now/CVE-2020-8705.md): Insecure default initialization of resource in Intel(R) Boot Guard in Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13 (no CVSS, Intel(R) Boot Guard, Intel(R) CSME, Intel(R) TXE, Intel(R)…)
- [CVE-2020-8744](https://cve.now/CVE-2020-8744.md): Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions (no CVSS, Intel(R) CSME versions, Intel(R) TXE, Intel(R) SPS)
- [CVE-2020-8745](https://cve.now/CVE-2020-8745.md): Insufficient control flow management in subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, (no CVSS, Intel(R) CSME, Intel(R) TXE)
- [CVE-2020-12304](https://cve.now/CVE-2020-12304.md): Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enab (no CVSS, Intel(R) DAL SDK)
- [CVE-2020-12297](https://cve.now/CVE-2020-12297.md): Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13. (no CVSS, Intel(R) CSME, Intel TXE)
- [CVE-2020-8753](https://cve.now/CVE-2020-8753.md): Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may all (no CVSS, Intel(R) AMT, Intel(R) ISM versions)
- [CVE-2020-8752](https://cve.now/CVE-2020-8752.md): Out-of-bounds write in IPv6 subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow (no CVSS, Intel(R) AMT, Intel(R) ISM versions)
- [CVE-2020-8739](https://cve.now/CVE-2020-8739.md): Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authenticated user to pot (no CVSS, Intel BIOS platform sample code for some Intel(R) Processors)
- [CVE-2020-8740](https://cve.now/CVE-2020-8740.md): Out of bounds write in Intel BIOS platform sample code for some Intel(R) Processors may allow a privileged user to potentially enable escala (no CVSS, Intel BIOS platform sample code for some Intel(R) Processors)
- [CVE-2020-8738](https://cve.now/CVE-2020-8738.md): Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially (no CVSS, Intel BIOS platform sample code for some Intel(R) Processors)
- [CVE-2020-8764](https://cve.now/CVE-2020-8764.md): Improper access control in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privil (no CVSS, Intel(R) Processors)
- [CVE-2020-28247](https://cve.now/CVE-2020-28247.md): The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. (no CVSS, lettre)
- [CVE-2020-8695](https://cve.now/CVE-2020-8695.md): Observable discrepancy in the RAPL interface for some Intel(R) Processors may allow a privileged user to potentially enable information disc (no CVSS, Intel(R) Processors)
- [CVE-2020-8694](https://cve.now/CVE-2020-8694.md): Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable in (no CVSS, Intel(R) Processors)
- [CVE-2020-12312](https://cve.now/CVE-2020-12312.md): Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before ver (no CVSS, Intel(R) Stratix(R) 10 FPGA firmware provided with the Inte…)
- [CVE-2020-8737](https://cve.now/CVE-2020-8737.md): Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before ver (no CVSS, Intel(R) Stratix(R) 10 FPGA firmware provided with the Inte…)
- [CVE-2020-8696](https://cve.now/CVE-2020-8696.md): Improper removal of sensitive information before storage or transfer in some Intel(R) Processors may allow an authenticated user to potentia (no CVSS, Intel(R) Processors)
- [CVE-2020-8698](https://cve.now/CVE-2020-8698.md): Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclos (no CVSS, Intel(R) Processors)
- [CVE-2020-8691](https://cve.now/CVE-2020-8691.md): A logic issue in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enable escalation o (no CVSS, Intel(R) Ethernet 700 Series Controllers)
- [CVE-2020-8690](https://cve.now/CVE-2020-8690.md): Protection mechanism failure in Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enabl (no CVSS, Intel(R) Ethernet 700 Series Controllers)
- [CVE-2020-8692](https://cve.now/CVE-2020-8692.md): Insufficient access control in the firmware of the Intel(R) Ethernet 700 Series Controllers before version 7.3 may allow a privileged user t (no CVSS, Intel(R) Ethernet 700 Series Controllers)
- [CVE-2020-8693](https://cve.now/CVE-2020-8693.md): Improper buffer restrictions in the firmware of the Intel(R) Ethernet 700 Series Controllers may allow a privileged user to potentially enab (no CVSS, Intel(R) Ethernet 700 Series Controllers)
- [CVE-2020-8677](https://cve.now/CVE-2020-8677.md): Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable denial (no CVSS, versions)
- [CVE-2020-8676](https://cve.now/CVE-2020-8676.md): Improper access control in the Intel(R) Visual Compute Accelerator 2, all versions, may allow a privileged user to potentially enable escala (no CVSS, versions)
- [CVE-2020-0584](https://cve.now/CVE-2020-0584.md): Buffer overflow in firmware for Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(TM) SSD 900P and 905P Series may allow an unauthen (no CVSS, Intel(R) SSD DC P4800X and P4801X Series, Intel(R) Optane(T…)
- [CVE-2020-12311](https://cve.now/CVE-2020-12311.md): Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated (no CVSS, Intel(R) Client SSDs and some Intel(R) Data Center SSDs)
- [CVE-2020-12310](https://cve.now/CVE-2020-12310.md): Insufficient control flow managementin firmware in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticated (no CVSS, Intel(R) Client SSDs and some Intel(R) Data Center SSDs)
- [CVE-2020-12309](https://cve.now/CVE-2020-12309.md): Insufficiently protected credentialsin subsystem in some Intel(R) Client SSDs and some Intel(R) Data Center SSDs may allow an unauthenticate (no CVSS, Intel(R) Client SSDs and some Intel(R) Data Center SSDs)
- [CVE-2020-0592](https://cve.now/CVE-2020-0592.md): Out of bounds write in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privil (no CVSS, Intel(R) Processors)
- [CVE-2020-0588](https://cve.now/CVE-2020-0588.md): Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv (no CVSS, Intel(R) Processors)
- [CVE-2020-0593](https://cve.now/CVE-2020-0593.md): Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p (no CVSS, Intel(R) Processors)
- [CVE-2020-0591](https://cve.now/CVE-2020-0591.md): Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of p (no CVSS, Intel(R) Processors)
- [CVE-2020-0587](https://cve.now/CVE-2020-0587.md): Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of priv (no CVSS, Intel(R) Processors)
- [CVE-2020-0590](https://cve.now/CVE-2020-0590.md): Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of (no CVSS, Intel(R) Processors)
- [CVE-2020-0575](https://cve.now/CVE-2020-0575.md): Improper buffer restrictions in the Intel(R) Unite Client for Windows\* before version 4.2.13064 may allow an authenticated user to potential (no CVSS, Intel(R) Unite Client for Windows\*)
- [CVE-2019-11121](https://cve.now/CVE-2019-11121.md): Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an authenticated user to (no CVSS, Intel(R) Media SDK for Windows)
- [CVE-2020-24573](https://cve.now/CVE-2020-24573.md): BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the light (no CVSS)
- [CVE-2020-13770](https://cve.now/CVE-2020-13770.md): Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes (no CVSS)
- [CVE-2020-7472](https://cve.now/CVE-2020-7472.md): An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 (no CVSS)
- [CVE-2020-28271](https://cve.now/CVE-2020-28271.md): Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to rem (no CVSS, deephas)
- [CVE-2020-28270](https://cve.now/CVE-2020-28270.md): Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service an (no CVSS, object-hierarchy-access)
- [CVE-2020-28269](https://cve.now/CVE-2020-28269.md): Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remot (no CVSS, field)
- [CVE-2020-13771](https://cve.now/CVE-2020-13771.md): Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allow (no CVSS)
- [CVE-2020-24441](https://cve.now/CVE-2020-24441.md): Improper Access Control in Adobe Acrobat Reader for Android (CVSS 5.5, Adobe Acrobat Reader)
- [CVE-2020-24443](https://cve.now/CVE-2020-24443.md): Reflected Cross-Site Scripting (XSS) in Adobe Connect (CVSS 6.1, Adobe Connect)
- [CVE-2020-24442](https://cve.now/CVE-2020-24442.md): Reflected Cross-Site Scripting (XSS) in Adobe Connect (CVSS 6.1, Adobe Connect)
- [CVE-2020-9128](https://cve.now/CVE-2020-9128.md): FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. (no CVSS, FusionCompute)
- [CVE-2020-25658](https://cve.now/CVE-2020-25658.md): It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. (CVSS 7.5, Sybren A. Stüvel python-rsa · rsa)
- [CVE-2020-27481](https://cve.now/CVE-2020-27481.md): An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin \<= 2.1.4 exists due to the usage of "wp\_ajax\_nopriv" call in WordPr (no CVSS)
- [CVE-2020-13954](https://cve.now/CVE-2020-13954.md): Apache CXF Reflected XSS in the services listing page via the styleSheetPath (no CVSS, Apache Software Foundation Apache CXF · org.apache.cxf:a… +1)
- [CVE-2020-7770](https://cve.now/CVE-2020-7770.md): Prototype Pollution (CVSS 6.5, json8)
- [CVE-2020-3632](https://cve.now/CVE-2020-3632.md): u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snapdragon Mobile in QSM (no CVSS, Qualcomm Snapdragon Compute, Snapdragon Mobile)
- [CVE-2020-3639](https://cve.now/CVE-2020-3639.md): u'When a non standard SIP sigcomp message is received from the network, then there may be chances of using more UDVM cycle or memory overflo (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11207](https://cve.now/CVE-2020-11207.md): Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snap (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11208](https://cve.now/CVE-2020-11208.md): Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD82 (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-11209](https://cve.now/CVE-2020-11209.md): Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS60 (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-11205](https://cve.now/CVE-2020-11205.md): u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Mo…)
- [CVE-2020-11206](https://cve.now/CVE-2020-11206.md): Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Sn (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11201](https://cve.now/CVE-2020-11201.md): Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11202](https://cve.now/CVE-2020-11202.md): Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual si (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11193](https://cve.now/CVE-2020-11193.md): u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdra (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11196](https://cve.now/CVE-2020-11196.md): u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapd (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11168](https://cve.now/CVE-2020-11168.md): u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdr (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11175](https://cve.now/CVE-2020-11175.md): u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improp (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11184](https://cve.now/CVE-2020-11184.md): u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…)
- [CVE-2020-11131](https://cve.now/CVE-2020-11131.md): u'Possible buffer overflow in WMA message processing due to integer overflow occurs when processing command received from user space' in Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag…)
- [CVE-2020-11132](https://cve.now/CVE-2020-11132.md): u'Buffer over read in boot due to size check ignored before copying GUID attribute from request to response' in Snapdragon Auto, Snapdragon (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11127](https://cve.now/CVE-2020-11127.md): u'Integer overflow can cause a buffer overflow due to lack of table length check in the extensible boot Loader during the validation of secu (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-11130](https://cve.now/CVE-2020-11130.md): u'Possible buffer overflow in WIFI hal process due to copying data without checking the buffer length' in Snapdragon Auto, Snapdragon Comput (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…)
- [CVE-2020-11121](https://cve.now/CVE-2020-11121.md): u'Possible buffer overflow in WIFI hal process due to usage of memcpy without checking length of destination buffer' in Snapdragon Auto, Sna (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon In…)
- [CVE-2020-11123](https://cve.now/CVE-2020-11123.md): u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user\` (no CVSS, Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Co…)
- [CVE-2020-7333](https://cve.now/CVE-2020-7333.md): Cross-site Scripting (XSS) in firewall ePO extension of McAfee Endpoint Security (ENS) (CVSS 4.8, Mcafee Endpoint Security for Windows)
- [CVE-2020-7332](https://cve.now/CVE-2020-7332.md): Cross-Site Request Forgery (CSRF) in firewall ePO extension of McAfee Endpoint Security (ENS) (CVSS 7.0, Mcafee Endpoint Security for Windows)
- [CVE-2020-7331](https://cve.now/CVE-2020-7331.md): Unquoted service executable path in McAfee Endpoint Security (ENS) (CVSS 7.8, McAfee Endpoint Security)
- [CVE-2020-7769](https://cve.now/CVE-2020-7769.md): Command Injection (CVSS 8.6, nodemailer)
- [CVE-2020-26070](https://cve.now/CVE-2020-26070.md): Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers Slow Path Forwarding Denial of Service Vulnerability (CVSS 8.6, Cisco IOS XR Software)
- [CVE-2020-2050](https://cve.now/CVE-2020-2050.md): PAN-OS: Authentication bypass vulnerability in GlobalProtect SSL VPN client certificate verification (CVSS 8.2, Palo Alto Networks PAN-OS)
- [CVE-2020-2048](https://cve.now/CVE-2020-2048.md): PAN-OS: System proxy passwords may be logged in clear text while viewing system state (CVSS 3.3, Palo Alto Networks PAN-OS)
- [CVE-2020-2022](https://cve.now/CVE-2020-2022.md): PAN-OS: Panorama session disclosure during context switch into managed device (CVSS 7.5, Palo Alto Networks PAN-OS)
- [CVE-2020-2000](https://cve.now/CVE-2020-2000.md): PAN-OS: OS command injection and memory corruption vulnerability (CVSS 7.2, Palo Alto Networks PAN-OS)
- [CVE-2020-1999](https://cve.now/CVE-2020-1999.md): PAN-OS: Threat signatures are evaded by specifically crafted packets (CVSS 5.3, Palo Alto Networks PAN-OS)
- [CVE-2019-17566](https://cve.now/CVE-2019-17566.md): Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. (no CVSS, Apache Batik · org.apache.xmlgraphics:batik)
- [CVE-2020-25706](https://cve.now/CVE-2020-25706.md): A cross-site scripting (XSS) vulnerability exists in templates\_import.php (Cacti 1.2.13) due to Improper escaping of error message during te (CVSS 5.4, The Cacti Group cacti)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.