# CVEs published 2020-11-21

8 CVEs were published on November 21, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-14230](https://cve.now/CVE-2020-14230.md): HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. (no CVSS, HCL Domino)
- [CVE-2020-14258](https://cve.now/CVE-2020-14258.md): HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. (no CVSS, HCL Notes)
- [CVE-2020-14234](https://cve.now/CVE-2020-14234.md): HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an atta (no CVSS, HCL Domino)
- [CVE-2020-25189](https://cve.now/CVE-2020-25189.md): The affected product is vulnerable to three stack-based buffer overflows, which may allow an unauthenticated attacker to remotely execute ar (no CVSS, IP150)
- [CVE-2020-25185](https://cve.now/CVE-2020-25185.md): The affected product is vulnerable to five post-authentication buffer overflows, which may allow a logged in user to remotely execute arbitr (no CVSS, IP150)
- [CVE-2020-5797](https://cve.now/CVE-2020-5797.md): UNIX Symbolic Link (Symlink) Following in TP-Link Archer C9(US)\_V1\_180125 firmware allows an unauthenticated actor, with physical access and (no CVSS, TP-Link Archer C9 A1)
- [CVE-2020-25725](https://cve.now/CVE-2020-25725.md): In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState \*state) SplashOutputDev.cc:3079 is trying to use the freed \`t3GlyphStack-\>cache\`, which (CVSS 5.0, Glyph & Cog xpdf)
- [CVE-2020-28975](https://cve.now/CVE-2020-28975.md): svm\_predict\_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of servi (no CVSS, scikit-learn)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.