# CVEs published 2020-11-23

57 CVEs were published on November 23, 2020: 2 critical, 6 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-28984](https://cve.now/CVE-2020-28984.md): prive/formulaires/configurer\_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display\_navigation, displ (no CVSS)
- [CVE-2020-4006](https://cve.now/CVE-2020-4006.md): VMware Workspace One Access, Access Connector, Identity Manager, and Identity Manager Connector address have a command injection vulnerabili (CVSS 9.1, KEV, VMware Workspace One Access (Access), VMware Workspace One…)
- [CVE-2020-25660](https://cve.now/CVE-2020-25660.md): A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients co (no CVSS, ceph)
- [CVE-2020-25696](https://cve.now/CVE-2020-25696.md): A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6 (no CVSS, PostgreSQL)
- [CVE-2020-26229](https://cve.now/CVE-2020-26229.md): XML External Entity in Dashboard Widget (CVSS 3.7, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2020-26228](https://cve.now/CVE-2020-26228.md): Cleartext storage of session identifier (CVSS 8.1, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2020-25688](https://cve.now/CVE-2020-25688.md): A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. (no CVSS, rhacm)
- [CVE-2020-26227](https://cve.now/CVE-2020-26227.md): Cross-Site Scripting in Fluid view helpers (CVSS 6.1, TYPO3.CMS · typo3/cms-core +1)
- [CVE-2020-24227](https://cve.now/CVE-2020-24227.md): Playground Sessions v2.5.582 (and earlier) for Windows, stores the user credentials in plain text allowing anyone with access to UserProfile (no CVSS)
- [CVE-2020-26231](https://cve.now/CVE-2020-26231.md): Bypass of fix for CVE-2020-15247, Twig sandbox escape (CVSS 5.2, octobercms october · october/cms)
- [CVE-2018-16719](https://cve.now/CVE-2018-16719.md): In Jingyun Antivirus v2.4.2.39, the driver file (hookbody.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe (no CVSS)
- [CVE-2018-16720](https://cve.now/CVE-2018-16720.md): In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp (no CVSS)
- [CVE-2018-16721](https://cve.now/CVE-2018-16721.md): In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp (no CVSS)
- [CVE-2018-16722](https://cve.now/CVE-2018-16722.md): In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp (no CVSS)
- [CVE-2020-28360](https://cve.now/CVE-2020-28360.md): Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. (no CVSS, private-ip)
- [CVE-2018-16723](https://cve.now/CVE-2018-16723.md): In Jingyun Antivirus v2.4.2.39, the driver file (ZySandbox.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp (no CVSS)
- [CVE-2020-15437](https://cve.now/CVE-2020-15437.md): The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250\_core.c:serial8250\_isa\_init\_p (no CVSS, linux kernel)
- [CVE-2020-15436](https://cve.now/CVE-2020-15436.md): Use-after-free vulnerability in fs/block\_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of ser (no CVSS, linux kernel)
- [CVE-2020-15249](https://cve.now/CVE-2020-15249.md): Stored XSS by authenticated backend user with access to upload files (CVSS 2.8, octobercms october · october/backend)
- [CVE-2020-15248](https://cve.now/CVE-2020-15248.md): Privilege escalation by backend users assigned to the default "Publisher" system role (CVSS 4.0, octobercms october · october/backend)
- [CVE-2020-28927](https://cve.now/CVE-2020-28927.md): There is a Stored XSS in Magicpin v2.1 in the User Registration section. (no CVSS)
- [CVE-2020-15247](https://cve.now/CVE-2020-15247.md): Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled. (CVSS 5.2, octobercms october · october/cms)
- [CVE-2020-15246](https://cve.now/CVE-2020-15246.md): Local File Inclusion by unauthenticated users (CVSS 7.5, octobercms october · october/cms)
- [CVE-2020-26239](https://cve.now/CVE-2020-26239.md): Cross-Site Scripting in Scratch browser addons (CVSS 7.6, ScratchAddons)
- [CVE-2020-7927](https://cve.now/CVE-2020-7927.md): Potential privilege escalation in Ops Manager API (CVSS 8.1, MongoDB Ops Manager)
- [CVE-2020-28896](https://cve.now/CVE-2020-28896.md): Mutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl\_force\_tls was processed if an IMAP server's initial server response (no CVSS)
- [CVE-2020-28864](https://cve.now/CVE-2020-28864.md): Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a (no CVSS)
- [CVE-2018-20803](https://cve.now/CVE-2018-20803.md): Infinite loop in aggregation expression (CVSS 6.5, MongoDB Server)
- [CVE-2020-4854](https://cve.now/CVE-2020-4854.md): IBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for (CVSS 9.8, IBM Spectrum Protect Plus)
- [CVE-2020-4783](https://cve.now/CVE-2020-4783.md): IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to obtain sensitive information, caused by the failure to prop (CVSS 5.9, IBM Spectrum Protect Plus)
- [CVE-2020-4771](https://cve.now/CVE-2020-4771.md): IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensiti (CVSS 5.3, IBM Spectrum Protect Operations Center)
- [CVE-2020-7928](https://cve.now/CVE-2020-7928.md): Improper neutralization of null byte leads to read overrun (CVSS 6.5, MongoDB Server)
- [CVE-2020-6939](https://cve.now/CVE-2020-6939.md): Tableau Server installations configured with Site-Specific SAML that allows the APIs to be used by unauthenticated users. (no CVSS, Tableau Server)
- [CVE-2020-12352](https://cve.now/CVE-2020-12352.md): Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. (no CVSS, BlueZ)
- [CVE-2020-12351](https://cve.now/CVE-2020-12351.md): Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. (no CVSS, BlueZ)
- [CVE-2019-14587](https://cve.now/CVE-2019-14587.md): Logic issue EDK II may allow an unauthenticated user to potentially enable denial of service via adjacent access. (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14586](https://cve.now/CVE-2019-14586.md): Use after free vulnerability in EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14575](https://cve.now/CVE-2019-14575.md): Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via lo (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14563](https://cve.now/CVE-2019-14563.md): Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access. (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14562](https://cve.now/CVE-2019-14562.md): Integer overflow in DxeImageVerificationHandler() EDK II may allow an authenticated user to potentially enable denial of service via local a (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14559](https://cve.now/CVE-2019-14559.md): Uncontrolled resource consumption in EDK II may allow an unauthenticated user to potentially enable denial of service via network access. (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2019-14553](https://cve.now/CVE-2019-14553.md): Improper authentication in EDK II may allow a privileged user to potentially enable information disclosure via network access. (no CVSS, Extensible Firmware Interface Development Kit)
- [CVE-2020-28421](https://cve.now/CVE-2020-28421.md): CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attacke (no CVSS, CA Unified Infrastructure Management)
- [CVE-2020-7777](https://cve.now/CVE-2020-7777.md): Arbitrary Code Execution (CVSS 7.2, jsen)
- [CVE-2020-1778](https://cve.now/CVE-2020-1778.md): Bypassing user account validation (CVSS 4.1, OTRS AG OTRS)
- [CVE-2019-2393](https://cve.now/CVE-2019-2393.md): Crash while joining collections with $lookup (CVSS 6.5, MongoDB Server)
- [CVE-2019-20923](https://cve.now/CVE-2019-20923.md): Crash while handling internal Javascript exception types (CVSS 6.5, MongoDB Server)
- [CVE-2019-20924](https://cve.now/CVE-2019-20924.md): Invariant in IndexBoundsBuilder (CVSS 6.5, MongoDB Server)
- [CVE-2019-2392](https://cve.now/CVE-2019-2392.md): $mod can result in undefined behavior (CVSS 6.5, MongoDB Server)
- [CVE-2018-20805](https://cve.now/CVE-2018-20805.md): Invariant with $elemMatch (CVSS 6.5, MongoDB Server)
- [CVE-2018-20802](https://cve.now/CVE-2018-20802.md): Post-auth queries on compound index may crash mongod (CVSS 6.5, MongoDB Server)
- [CVE-2018-20804](https://cve.now/CVE-2018-20804.md): Invariant failure in applyOps (CVSS 6.5, MongoDB Server)
- [CVE-2020-7926](https://cve.now/CVE-2020-7926.md): Specific query can cause a DoS against MongoDB Server (CVSS 6.5, MongoDB Server)
- [CVE-2020-7925](https://cve.now/CVE-2020-7925.md): Denial of Service when processing malformed Role names (CVSS 7.5, MongoDB Server)
- [CVE-2020-27985](https://cve.now/CVE-2020-27985.md): Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without us (no CVSS)
- [CVE-2020-28053](https://cve.now/CVE-2020-28053.md): HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private (no CVSS, github.com/hashicorp/consul)
- [CVE-2020-0569](https://cve.now/CVE-2020-0569.md): Out of bounds write in Intel(R) PROSet/Wireless WiFi products on Windows 10 may allow an authenticated user to potentially enable denial of (no CVSS, Intel(R) PROSet/Wireless WiFi products on Windows)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-11-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.