CVEs published November 26, 2020
19 CVEs were published on November 26, 2020: 0 critical, 1 high.
- Published
- 19
- Critical
- 0
- High
- 1
- Medium
- 1
- Low
- 0
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- FactoryTalk Linx
- 3
- spice-vdagent
- 3
- djvalidator
- 1
- petl
- 1
- systeminformation
- 1
High 1
Medium, low and unrated 18
- CVE-2020-12262Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.
- CVE-2020-29129ncsi.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the to
- CVE-2020-26936Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.
- CVE-2020-29042An issue was discovered in BigBlueButton through 2.2.29.
- CVE-2020-29043An issue was discovered in BigBlueButton through 2.2.29.
- CVE-2020-13886Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Trav
- CVE-2020-27663In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read
- CVE-2020-27662In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data fr
- CVE-2020-27207Zetetic SQLCipher 4.x before 4.4.1 has a use-after-free, related to sqlcipher_codec_pragma and sqlite3Strlen30 in sqlite3.c.
- CVE-2020-7779Regular Expression Denial of Service (ReDoS)djvalidator
- CVE-2020-29128petl before 1.68, in some configurations, allows resolution of entities in an XML document.petl
- CVE-2020-27251A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.FactoryTalk Linx
- CVE-2020-27255A heap overflow vulnerability exists within FactoryTalk Linx Version 6.11 and prior.FactoryTalk Linx
- CVE-2020-27253A flaw exists in the Ingress/Egress checks routine of FactoryTalk Linx Version 6.11 and prior.FactoryTalk Linx
- CVE-2020-25652A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domaspice-vdagent
- CVE-2020-25653A race condition vulnerability was found in the way the spice-vdagentd daemon handled new client connections.spice-vdagent
- CVE-2020-25651A flaw was found in the SPICE file transfer protocol.spice-vdagent
- CVE-2020-29130slirp.c in libslirp through 4.3.1 has a buffer over-read because it tries to read a certain amount of header data even if that exceeds the t