# CVEs published 2020-11-15

8 CVEs were published on November 15, 2020: 0 critical, 1 high. Days are UTC.

- [CVE-2019-19561](https://cve.now/CVE-2019-19561.md): A misconfiguration in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with direct physical access to device hardware to o (no CVSS)
- [CVE-2019-19557](https://cve.now/CVE-2019-19557.md): A misconfiguration in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with direct physical access to device hardware to obt (no CVSS)
- [CVE-2019-19563](https://cve.now/CVE-2019-19563.md): A misconfiguration in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with direct physical access to device hardware to o (no CVSS)
- [CVE-2019-19560](https://cve.now/CVE-2019-19560.md): An authentication bypass in the debug interface in Mercedes-Benz HERMES 1.5 allows an attacker with physical access to device hardware to ob (no CVSS)
- [CVE-2019-19556](https://cve.now/CVE-2019-19556.md): An authentication bypass in the debug interface in Mercedes-Benz HERMES 1 allows an attacker with physical access to device hardware to obta (no CVSS)
- [CVE-2019-19562](https://cve.now/CVE-2019-19562.md): An authentication bypass in the debug interface in Mercedes-Benz HERMES 2.1 allows an attacker with physical access to device hardware to ob (no CVSS)
- [CVE-2020-28268](https://cve.now/CVE-2020-28268.md): Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may le (no CVSS, controlled-merge)
- [CVE-2020-7772](https://cve.now/CVE-2020-7772.md): Prototype Pollution (CVSS 7.5, doc-path)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.