# CVEs published 2020-12-05

2 CVEs were published on December 5, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-29573](https://cve.now/CVE-2020-29573.md): sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input (no CVSS)
- [CVE-2020-29572](https://cve.now/CVE-2020-29572.md): app/View/Elements/genericElements/SingleViews/Fields/genericField.ctp in MISP 2.4.135 has XSS via the authkey comment field. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.