CVEs published November 21, 2020
8 CVEs were published on November 21, 2020: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- HCL Domino
- 2
- IP150
- 2
- Glyph & Cog xpdf
- 1
- HCL Notes
- 1
- scikit-learn
- 1
- TP-Link Archer C9 A1
- 1
Medium, low and unrated 8
- CVE-2020-14230HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input.HCL Domino
- CVE-2020-14258HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input.HCL Notes
- CVE-2020-14234HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attaHCL Domino
- CVE-2020-25189The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker to remotely execute arIP150
- CVE-2020-25185The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitrIP150
- CVE-2020-5797UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)_V1_180125 firmware allows an unauthenticated actor, with physical access andTP-Link Archer C9 A1
- CVE-2020-25725In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, whichGlyph & Cog xpdf
- CVE-2020-28975svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of serviscikit-learn