# CVEs published 2020-11-16

77 CVEs were published on November 16, 2020: 0 critical, 7 high. Days are UTC.

- [CVE-2020-26225](https://cve.now/CVE-2020-26225.md): Reflected XSS in PrestaShop Product Comments (CVSS 8.7, PrestaShop productcomments · prestashop/productcomments)
- [CVE-2020-26224](https://cve.now/CVE-2020-26224.md): Improper Access Control in PrestaShop (CVSS 7.5, PrestaShop)
- [CVE-2020-26217](https://cve.now/CVE-2020-26217.md): Remote Code Execution in XStream (CVSS 8.0, x-stream xstream · activemq +1)
- [CVE-2020-27483](https://cve.now/CVE-2020-27483.md): Garmin Forerunner 235 before 8.20 is affected by: Array index error. (no CVSS)
- [CVE-2020-27484](https://cve.now/CVE-2020-27484.md): Garmin Forerunner 235 before 8.20 is affected by: Integer Overflow. (no CVSS)
- [CVE-2020-27485](https://cve.now/CVE-2020-27485.md): Garmin Forerunner 235 before 8.20 is affected by: Array index error. (no CVSS)
- [CVE-2020-27486](https://cve.now/CVE-2020-27486.md): Garmin Forerunner 235 before 8.20 is affected by: Buffer Overflow. (no CVSS)
- [CVE-2020-28693](https://cve.now/CVE-2020-28693.md): An unrestricted file upload issue in HorizontCMS 1.0.0-beta allows an authenticated remote attacker to upload PHP code through a zip file by (no CVSS)
- [CVE-2020-26510](https://cve.now/CVE-2020-26510.md): Airleader Master \<= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war (no CVSS)
- [CVE-2020-26509](https://cve.now/CVE-2020-26509.md): Airleader Master and Easy \<= 6.21 devices have default credentials that can be used for a denial of service. (no CVSS)
- [CVE-2020-26508](https://cve.now/CVE-2020-26508.md): The WebTools component on Canon Oce ColorWave 3500 5.1.1.0 devices allows attackers to retrieve stored SMB credentials via the export featur (no CVSS)
- [CVE-2020-28692](https://cve.now/CVE-2020-28692.md): In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files. (no CVSS)
- [CVE-2020-23489](https://cve.now/CVE-2020-23489.md): The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. (no CVSS, wwbn/avideo)
- [CVE-2020-23490](https://cve.now/CVE-2020-23490.md): There was a local file disclosure vulnerability in AVideo \< 8.9 via the proxy streaming. (no CVSS)
- [CVE-2020-27991](https://cve.now/CVE-2020-27991.md): Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field). (no CVSS)
- [CVE-2020-27990](https://cve.now/CVE-2020-27990.md): Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent). (no CVSS)
- [CVE-2020-27989](https://cve.now/CVE-2020-27989.md): Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard). (no CVSS)
- [CVE-2020-27988](https://cve.now/CVE-2020-27988.md): Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field). (no CVSS)
- [CVE-2020-28723](https://cve.now/CVE-2020-28723.md): Memory leak in IPv6Param::setAddress in CloudAvid PParam 1.3.1. (no CVSS)
- [CVE-2020-4763](https://cve.now/CVE-2020-4763.md): IBM Sterling File Gateway 6.0.0.0 through 6.0.3.2 and 2.2.0.0 through 2.2.6.5 does not set the secure attribute on authorization tokens or s (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2020-4705](https://cve.now/CVE-2020-4705.md): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to cross-site scripting. (CVSS 4.8, IBM Sterling B2B Integrator)
- [CVE-2020-4700](https://cve.now/CVE-2020-4700.md): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user belonging (CVSS 7.5, IBM Sterling B2B Integrator)
- [CVE-2020-4692](https://cve.now/CVE-2020-4692.md): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 could allow an authenticated user to obtain (CVSS 4.3, IBM Sterling B2B Integrator)
- [CVE-2020-4672](https://cve.now/CVE-2020-4672.md): IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Business Automation Workflow)
- [CVE-2020-4671](https://cve.now/CVE-2020-4671.md): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 stores potentially sensitive information in (CVSS 6.5, IBM Sterling B2B Integrator)
- [CVE-2020-4665](https://cve.now/CVE-2020-4665.md): IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 does not set the secure attribute on authorization tokens or s (CVSS 4.3, IBM Sterling File Gateway)
- [CVE-2020-4655](https://cve.now/CVE-2020-4655.md): IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.2 and 5.2.0.0 through 5.2.6.5 is vulnerable to SQL injection. (CVSS 6.3, IBM Sterling B2B Integrator)
- [CVE-2020-4647](https://cve.now/CVE-2020-4647.md): IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 is vulnerable to SQL injection. (CVSS 6.3, IBM Sterling File Gateway)
- [CVE-2020-4566](https://cve.now/CVE-2020-4566.md): IBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 stores potentially highly sensitive informa (CVSS 6.5, IBM Sterling B2B Integrator)
- [CVE-2020-4476](https://cve.now/CVE-2020-4476.md): IBM Sterling File Gateway 2.2.0.0 through 2.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sensitive information (CVSS 5.3, IBM Sterling File Gateway)
- [CVE-2020-4475](https://cve.now/CVE-2020-4475.md): IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.2 could allow a remote attacker to obtain sen (CVSS 4.3, IBM Sterling B2B Integrator)
- [CVE-2020-27422](https://cve.now/CVE-2020-27422.md): In Anuko Time Tracker v1.19.23.5311, the password reset link emailed to the user doesn't expire once used, allowing an attacker to use the s (no CVSS)
- [CVE-2020-27423](https://cve.now/CVE-2020-27423.md): Anuko Time Tracker v1.19.23.5311 lacks rate limit on the password reset module which allows attacker to perform Denial of Service attack on (no CVSS)
- [CVE-2020-25952](https://cve.now/CVE-2020-25952.md): SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers (no CVSS)
- [CVE-2020-13773](https://cve.now/CVE-2020-13773.md): Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm\_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm\_splitcollapse.aspx, /LDM (no CVSS)
- [CVE-2020-13769](https://cve.now/CVE-2020-13769.md): LDMS/alert\_log.aspx in Ivanti Endpoint Manager through 2020.1 allows SQL Injection via a /remotecontrolauth/api/device request. (no CVSS)
- [CVE-2020-13772](https://cve.now/CVE-2020-13772.md): In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating (no CVSS)
- [CVE-2020-27191](https://cve.now/CVE-2020-27191.md): LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, (no CVSS)
- [CVE-2020-27623](https://cve.now/CVE-2020-27623.md): JetBrains IdeaVim before version 0.58 might have caused an information leak in limited circumstances. (no CVSS)
- [CVE-2020-27622](https://cve.now/CVE-2020-27622.md): In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version. (no CVSS)
- [CVE-2020-26129](https://cve.now/CVE-2020-26129.md): In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible. (no CVSS)
- [CVE-2020-27627](https://cve.now/CVE-2020-27627.md): JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. (no CVSS)
- [CVE-2020-27628](https://cve.now/CVE-2020-27628.md): In JetBrains TeamCity before 2020.1.5, the Guest user had access to audit records. (no CVSS)
- [CVE-2020-27629](https://cve.now/CVE-2020-27629.md): In JetBrains TeamCity before 2020.1.5, secure dependency parameters could be not masked in depending builds when there are no internal artif (no CVSS)
- [CVE-2020-25207](https://cve.now/CVE-2020-25207.md): JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler. (no CVSS)
- [CVE-2020-25013](https://cve.now/CVE-2020-25013.md): JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler. (no CVSS)
- [CVE-2020-27624](https://cve.now/CVE-2020-27624.md): JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF. (no CVSS)
- [CVE-2020-27625](https://cve.now/CVE-2020-27625.md): In JetBrains YouTrack before 2020.3.888, notifications might have mentioned inaccessible issues. (no CVSS)
- [CVE-2020-27626](https://cve.now/CVE-2020-27626.md): JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF. (no CVSS)
- [CVE-2020-25209](https://cve.now/CVE-2020-25209.md): In JetBrains YouTrack before 2020.3.6638, improper access control for some subresources leads to information disclosure via the REST API. (no CVSS)
- [CVE-2020-24366](https://cve.now/CVE-2020-24366.md): Sensitive information could be disclosed in the JetBrains YouTrack application before 2020.2.0 for Android via application backups. (no CVSS)
- [CVE-2020-27459](https://cve.now/CVE-2020-27459.md): Chronoforeum 2.0.11 allows Stored XSS vulnerabilities when inserting a crafted payload into a post. (no CVSS)
- [CVE-2020-25210](https://cve.now/CVE-2020-25210.md): In JetBrains YouTrack before 2020.3.7955, an attacker could access workflow rules without appropriate access grants. (no CVSS)
- [CVE-2020-7773](https://cve.now/CVE-2020-7773.md): Cross-site Scripting (XSS) (CVSS 6.5, markdown-it-highlightjs)
- [CVE-2020-7765](https://cve.now/CVE-2020-7765.md): Prototype Pollution (CVSS 5.6, @firebase/util)
- [CVE-2020-8897](https://cve.now/CVE-2020-8897.md): Robustness weakness in AWS KMS and Encryption SDKs (CVSS 4.8, Amazon AWS SDK · com.amazonaws:aws-encryption-sdk-java +1)
- [CVE-2020-5663](https://cve.now/CVE-2020-5663.md): Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via u (no CVSS, Neuroinformatics Unit, Integrative Computational Brain Scie…)
- [CVE-2020-5664](https://cve.now/CVE-2020-5664.md): Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecifie (no CVSS, Neuroinformatics Unit, Integrative Computational Brain Scie…)
- [CVE-2020-5659](https://cve.now/CVE-2020-5659.md): SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unsp (no CVSS, Neuroinformatics Unit, Integrative Computational Brain Scie…)
- [CVE-2020-5662](https://cve.now/CVE-2020-5662.md): Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script vi (no CVSS, Neuroinformatics Unit, Integrative Computational Brain Scie…)
- [CVE-2020-28656](https://cve.now/CVE-2020-28656.md): The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to (no CVSS)
- [CVE-2020-28649](https://cve.now/CVE-2020-28649.md): The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius\_ctc\_theme\_editor\_manage\_file. (CVSS 8.8)
- [CVE-2020-28650](https://cve.now/CVE-2020-28650.md): The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses\_remove\_filters to disable the standard WordPress XSS protect (CVSS 6.4)
- [CVE-2020-28648](https://cve.now/CVE-2020-28648.md): Improper input validation in the Auto-Discovery component of Nagios XI before 5.7.5 allows an authenticated attacker to execute remote code. (no CVSS)
- [CVE-2020-28642](https://cve.now/CVE-2020-28642.md): In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote atta (no CVSS)
- [CVE-2020-2490](https://cve.now/CVE-2020-2490.md): If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. (CVSS 7.2, QNAP Systems QTS)
- [CVE-2020-2492](https://cve.now/CVE-2020-2492.md): If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. (CVSS 7.2, QNAP Systems QTS)
- [CVE-2020-5666](https://cve.now/CVE-2020-5666.md): Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/ (no CVSS, Mitsubishi Electric MELSEC iQ-R Series CPU Modules)
- [CVE-2020-25695](https://cve.now/CVE-2020-25695.md): A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. (no CVSS, postgresql)
- [CVE-2020-25694](https://cve.now/CVE-2020-25694.md): A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. (no CVSS, postgresql)
- [CVE-2020-8259](https://cve.now/CVE-2020-8259.md): Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the encryption keys. (no CVSS, Nextcloud Server)
- [CVE-2020-8152](https://cve.now/CVE-2020-8152.md): Insufficient protection of the server-side encryption keys in Nextcloud Server 19.0.1 allowed an attacker to replace the public key to decry (no CVSS, Nextcloud Server)
- [CVE-2020-8270](https://cve.now/CVE-2020-8270.md): An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 (no CVSS, Citrix Virtual Apps and Desktops)
- [CVE-2020-8269](https://cve.now/CVE-2020-8269.md): An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfix (no CVSS, Citrix Virtual Apps and Desktops)
- [CVE-2020-8273](https://cve.now/CVE-2020-8273.md): Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8. (no CVSS, Citrix SD-WAN Center)
- [CVE-2020-8272](https://cve.now/CVE-2020-8272.md): Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 (no CVSS, Citrix SD-WAN Center)
- [CVE-2020-8271](https://cve.now/CVE-2020-8271.md): Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 (no CVSS, Citrix SD-WAN Center)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.