# CVEs published 2020-12-04

25 CVEs were published on December 4, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-28950](https://cve.now/CVE-2020-28950.md): The installer of Kaspersky Anti-Ransomware Tool (KART) prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an at (no CVSS, Kaspersky Anti-Ransomware Tool)
- [CVE-2020-25449](https://cve.now/CVE-2020-25449.md): Cross Site Scripting (XSS) vulnerability in Arachnys Cabot 0.11.12 can be exploited via the Address column. (no CVSS, cabot)
- [CVE-2020-25464](https://cve.now/CVE-2020-25464.md): Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. (no CVSS)
- [CVE-2020-25465](https://cve.now/CVE-2020-25465.md): Null Pointer Dereference. (no CVSS)
- [CVE-2020-25461](https://cve.now/CVE-2020-25461.md): Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of serv (no CVSS)
- [CVE-2020-25462](https://cve.now/CVE-2020-25462.md): Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903. (no CVSS)
- [CVE-2020-25463](https://cve.now/CVE-2020-25463.md): Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV (no CVSS)
- [CVE-2020-27408](https://cve.now/CVE-2020-27408.md): OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated (no CVSS)
- [CVE-2020-27409](https://cve.now/CVE-2020-27409.md): OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname paramet (no CVSS)
- [CVE-2020-5675](https://cve.now/CVE-2020-5675.md): Out-of-bounds read vulnerability in GT21 model of GOT2000 series (GT2107-WTBD V01.39.000 and earlier, GT2107-WTSD V01.39.000 and earlier, GT (no CVSS, Mitsubishi Electric GT21 model of GOT2000 series, GS21 mode…)
- [CVE-2020-29565](https://cve.now/CVE-2020-29565.md): An issue was discovered in OpenStack Horizon before 15.3.2, 16.x before 16.2.1, 17.x and 18.x before 18.3.3, 18.4.x, and 18.5.x. (no CVSS, horizon)
- [CVE-2020-29562](https://cve.now/CVE-2020-29562.md): The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, f (CVSS 4.8)
- [CVE-2020-28916](https://cve.now/CVE-2020-28916.md): hw/net/e1000e\_core.c in QEMU 5.0.0 has an infinite loop via an RX descriptor with a NULL buffer address. (no CVSS)
- [CVE-2020-29561](https://cve.now/CVE-2020-29561.md): An issue was discovered in SonicBOOM riscv-boom 3.0.0. (no CVSS)
- [CVE-2020-27348](https://cve.now/CVE-2020-27348.md): snapcraft may build snaps with incorrect LD\_LIBRARY\_PATH (CVSS 6.8, Canonical snapcraft · snapcraft)
- [CVE-2020-27765](https://cve.now/CVE-2020-27765.md): A flaw was found in ImageMagick in MagickCore/segment.c. (no CVSS, ImageMagick)
- [CVE-2020-27766](https://cve.now/CVE-2020-27766.md): A flaw was found in ImageMagick in MagickCore/statistic.c. (no CVSS, ImageMagick)
- [CVE-2020-27767](https://cve.now/CVE-2020-27767.md): A flaw was found in ImageMagick in MagickCore/quantum.h. (no CVSS, ImageMagick)
- [CVE-2020-27770](https://cve.now/CVE-2020-27770.md): Due to a missing check for 0 value of \`replace\_extent\`, it is possible for offset \`p\` to overflow in SubstituteString(), causing potential i (no CVSS, ImageMagick)
- [CVE-2020-27771](https://cve.now/CVE-2020-27771.md): In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of r (no CVSS, ImageMagick)
- [CVE-2020-27772](https://cve.now/CVE-2020-27772.md): A flaw was found in ImageMagick in coders/bmp.c. (no CVSS, ImageMagick)
- [CVE-2020-27773](https://cve.now/CVE-2020-27773.md): A flaw was found in ImageMagick in MagickCore/gem-private.h. (no CVSS, ImageMagick)
- [CVE-2020-27774](https://cve.now/CVE-2020-27774.md): A flaw was found in ImageMagick in MagickCore/statistic.c. (no CVSS, ImageMagick)
- [CVE-2020-27775](https://cve.now/CVE-2020-27775.md): A flaw was found in ImageMagick in MagickCore/quantum.h. (no CVSS, ImageMagick)
- [CVE-2020-27776](https://cve.now/CVE-2020-27776.md): A flaw was found in ImageMagick in MagickCore/statistic.c. (no CVSS, ImageMagick)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.