# CVEs published 2020-11-19

62 CVEs were published on November 19, 2020: 1 critical, 8 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-28209](https://cve.now/CVE-2020-28209.md): A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and En (CVSS 7.0, EcoStruxure Building Operation Enterprise Server installer…)
- [CVE-2020-28953](https://cve.now/CVE-2020-28953.md): In BigBlueButton before 2.2.29, a user can vote more than once in a single poll. (no CVSS)
- [CVE-2020-28954](https://cve.now/CVE-2020-28954.md): web/controllers/ApiController.groovy in BigBlueButton before 2.2.29 lacks certain parameter sanitization, as demonstrated by accepting contr (no CVSS)
- [CVE-2020-7568](https://cve.now/CVE-2020-7568.md): A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon M221 (all references, all versions) th (CVSS 3.1, Modicon M221, all references, all versions)
- [CVE-2020-7567](https://cve.now/CVE-2020-7567.md): A CWE-311: Missing Encryption of Sensitive Data vulnerability exists in Modicon M221 (all references, all versions) that could allow the att (CVSS 7.1, Modicon M221, all references, all versions)
- [CVE-2020-7566](https://cve.now/CVE-2020-7566.md): A CWE-334: Small Space of Random Values vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker to (CVSS 7.1, Modicon M221, all references, all versions)
- [CVE-2020-7565](https://cve.now/CVE-2020-7565.md): A CWE-326: Inadequate Encryption Strength vulnerability exists in Modicon M221 (all references, all versions) that could allow the attacker (CVSS 7.1, Modicon M221, all references, all versions)
- [CVE-2020-7558](https://cve.now/CVE-2020-7558.md): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7557](https://cve.now/CVE-2020-7557.md): A CWE-125 Out-of-bounds Read vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution w (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7556](https://cve.now/CVE-2020-7556.md): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7555](https://cve.now/CVE-2020-7555.md): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7554](https://cve.now/CVE-2020-7554.md): A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7553](https://cve.now/CVE-2020-7553.md): A CWE-787 Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247 that could cause Remote Code Execution (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7552](https://cve.now/CVE-2020-7552.md): A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Executio (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7551](https://cve.now/CVE-2020-7551.md): A CWE-787: Out-of-bounds Write vulnerability exists in IGSS Definition (Def.exe) version 14.0.0.20247, that could cause Remote Code Executio (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7550](https://cve.now/CVE-2020-7550.md): A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition (Def.exe) version (no CVSS, IGSS Definition (Def.exe))
- [CVE-2020-7544](https://cve.now/CVE-2020-7544.md): A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause pr (no CVSS, EcoStruxureª Operator Terminal Expert runtime)
- [CVE-2020-7559](https://cve.now/CVE-2020-7559.md): A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Cont (no CVSS, PLC Simulator on EcoStruxureª Control Expert (now Unity Pro))
- [CVE-2020-7538](https://cve.now/CVE-2020-7538.md): A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Un (no CVSS, PLC Simulator on EcoStruxureª Control Expert (now Unity Pro))
- [CVE-2020-28213](https://cve.now/CVE-2020-28213.md): A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (al (no CVSS, PLC Simulator on EcoStruxureª Control Expert (now Unity Pro))
- [CVE-2020-28212](https://cve.now/CVE-2020-28212.md): A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (n (no CVSS, PLC Simulator on EcoStruxureª Control Expert (now Unity Pro))
- [CVE-2020-28211](https://cve.now/CVE-2020-28211.md): A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that (no CVSS, PLC Simulator on EcoStruxureª Control Expert (now Unity Pro))
- [CVE-2020-7573](https://cve.now/CVE-2020-7573.md): A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote at (no CVSS, EcoStruxure Building Operation WebReports V1.9 -)
- [CVE-2020-7572](https://cve.now/CVE-2020-7572.md): A CWE-611 Improper Restriction of XML External Entity Reference vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3. (no CVSS, EcoStruxure Building Operation WebReports V1.9 -)
- [CVE-2020-7571](https://cve.now/CVE-2020-7571.md): A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoSt (no CVSS, EcoStruxure Building Operation WebReports V1.9 -)
- [CVE-2020-7570](https://cve.now/CVE-2020-7570.md): A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Stored) vulnerability exists in EcoStruxure Build (no CVSS, EcoStruxure Building Operation WebReports V1.9 -)
- [CVE-2020-7569](https://cve.now/CVE-2020-7569.md): A CWE-434 Unrestricted Upload of File with Dangerous Type vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that (no CVSS, EcoStruxure Building Operation WebReports V1.9 -)
- [CVE-2020-28210](https://cve.now/CVE-2020-28210.md): A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Ope (CVSS 6.1, EcoStruxure Building Operation WebStation V2.0 -)
- [CVE-2020-25989](https://cve.now/CVE-2020-25989.md): Privilege escalation via arbitrary file write in pritunl electron client 1.0.1116.6 through v1.2.2550.20. (no CVSS)
- [CVE-2020-28350](https://cve.now/CVE-2020-28350.md): A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter. (no CVSS)
- [CVE-2020-28924](https://cve.now/CVE-2020-28924.md): An issue was discovered in Rclone before 1.53.3. (no CVSS, github.com/rclone/rclone)
- [CVE-2020-28951](https://cve.now/CVE-2020-28951.md): libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. (no CVSS)
- [CVE-2020-28948](https://cve.now/CVE-2020-28948.md): Archive\_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. (no CVSS, pear/archive\_tar · drupal/core)
- [CVE-2020-28949](https://cve.now/CVE-2020-28949.md): Archive\_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as fil (CVSS 7.8, KEV, drupal/core · pear/archive\_tar)
- [CVE-2020-22394](https://cve.now/CVE-2020-22394.md): In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability. (no CVSS)
- [CVE-2020-28947](https://cve.now/CVE-2020-28947.md): In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled. (no CVSS)
- [CVE-2020-12510](https://cve.now/CVE-2020-12510.md): Beckhoff: Privilege Escalation through TwinCat System (CVSS 7.3, Beckhoff TwinCat XAR)
- [CVE-2020-12496](https://cve.now/CVE-2020-12496.md): ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 2.x exposures sensitive information to an unauthorized actor (CVSS 6.5, Endress+Hauser RSG35 - Ecograph T · Endress+Hauser ORSG3… +2)
- [CVE-2020-12495](https://cve.now/CVE-2020-12495.md): ENDRESS+HAUSER: Ecograph T utilizing Webserver firmware version 1.x has improper privilege management (CVSS 9.1, Endress+Hauser RSG35 - Ecograph T · Endress+Hauser ORSG35 -…)
- [CVE-2020-28942](https://cve.now/CVE-2020-28942.md): An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. (no CVSS)
- [CVE-2020-6879](https://cve.now/CVE-2020-6879.md): Some ZTE devices have input verification vulnerabilities. (no CVSS, ZXHN Z500 · ZXHN F670L)
- [CVE-2020-25700](https://cve.now/CVE-2020-25700.md): In moodle, some database module web services allowed students to add entries within groups they did not belong to. (no CVSS, moodle · moodle/moodle)
- [CVE-2020-25702](https://cve.now/CVE-2020-25702.md): In Moodle, it was possible to include JavaScript when re-naming content bank items. (no CVSS, moodle · moodle/moodle)
- [CVE-2020-25703](https://cve.now/CVE-2020-25703.md): The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. (no CVSS, moodle · moodle/moodle)
- [CVE-2020-25701](https://cve.now/CVE-2020-25701.md): If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would e (no CVSS, moodle · moodle/moodle)
- [CVE-2020-25698](https://cve.now/CVE-2020-25698.md): Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. (no CVSS, moodle · moodle/moodle)
- [CVE-2020-11831](https://cve.now/CVE-2020-11831.md): OvoiceManager has system permission to write vulnerability reports for arbitrary files, affected product is com.oppo.ovoicemanager V2.0.1. (no CVSS, com.oppo.ovoicemanager)
- [CVE-2020-11830](https://cve.now/CVE-2020-11830.md): QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0. (no CVSS, com.oppo.qualityprotect)
- [CVE-2020-11829](https://cve.now/CVE-2020-11829.md): Dynamic loading of services in the backup and restore SDK leads to elevated privileges, affected product is com.coloros.codebook V2.0.0\_5493 (no CVSS, com.coloros.codebook)
- [CVE-2020-9049](https://cve.now/CVE-2020-9049.md): victor Web Client and C•CURE Web Client JSON Web Token (JWT) Vulnerability (CVSS 7.1, Johnson Controls victor Web Client · Johnson Controls C•CUR…)
- [CVE-2020-28941](https://cve.now/CVE-2020-28941.md): An issue was discovered in drivers/accessibility/speakup/spk\_ttyio.c in the Linux kernel through 5.9.9. (CVSS 5.5)
- [CVE-2020-28054](https://cve.now/CVE-2020-28054.md): JamoDat TSMManager Collector version up to 6.5.0.21 is vulnerable to an Authorization Bypass because the Collector component is not properly (no CVSS)
- [CVE-2020-4718](https://cve.now/CVE-2020-4718.md): IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. (CVSS 6.4, IBM Jazz Reporting Service)
- [CVE-2020-4701](https://cve.now/CVE-2020-4701.md): IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by imprope (CVSS 8.4, IBM DB2 for Linux, UNIX and Windows)
- [CVE-2020-15710](https://cve.now/CVE-2020-15710.md): Potential double-free in pulseaudio (CVSS 5.3, Canonical PulseAudio)
- [CVE-2019-20933](https://cve.now/CVE-2019-20933.md): InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT tok (no CVSS, github.com/influxdata/influxdb)
- [CVE-2020-8278](https://cve.now/CVE-2020-8278.md): Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user. (no CVSS, Nextcloud Social)
- [CVE-2020-8279](https://cve.now/CVE-2020-8279.md): Missing validation of server certificates for out-going connections in Nextcloud Social \< 0.4.0 allowed a man-in-the-middle attack. (no CVSS, Nextcloud Social)
- [CVE-2020-8277](https://cve.now/CVE-2020-8277.md): A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versi (no CVSS, NodeJS Node)
- [CVE-2020-5947](https://cve.now/CVE-2020-5947.md): In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the B (no CVSS, BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-I…)
- [CVE-2020-25699](https://cve.now/CVE-2020-25699.md): In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles wit (no CVSS, moodle · moodle/moodle)
- [CVE-2020-7561](https://cve.now/CVE-2020-7561.md): A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause (no CVSS, Easergy T300 with firmware 2.7 and older)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.