# CVEs published 2020-12-08

116 CVEs were published on December 8, 2020: 0 critical, 5 high. 3 are now in CISA KEV. Days are UTC.

- [CVE-2020-26249](https://cve.now/CVE-2020-26249.md): Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability (CVSS 7.7, Cog-Creators Red-Dashboard · red-dashboard)
- [CVE-2020-26234](https://cve.now/CVE-2020-26234.md): Disabled Hostname Verification in OpenCast (CVSS 4.8, opencast · org.opencastproject:opencast-kernel)
- [CVE-2020-27755](https://cve.now/CVE-2020-27755.md): in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the prop (no CVSS, ImageMagick)
- [CVE-2020-27753](https://cve.now/CVE-2020-27753.md): There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially (no CVSS, ImageMagick)
- [CVE-2020-27752](https://cve.now/CVE-2020-27752.md): A flaw was found in ImageMagick in MagickCore/quantum-private.h. (no CVSS, ImageMagick)
- [CVE-2020-26256](https://cve.now/CVE-2020-26256.md): Denial of service in fast-csv (CVSS 5.7, C2FO fast-csv · fast-csv +1)
- [CVE-2020-27821](https://cve.now/CVE-2020-27821.md): A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. (no CVSS, QEMU)
- [CVE-2020-28274](https://cve.now/CVE-2020-28274.md): Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to rem (no CVSS, deepref)
- [CVE-2020-27918](https://cve.now/CVE-2020-27918.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-9991](https://cve.now/CVE-2020-9991.md): This issue was addressed with improved checks. (no CVSS, Apple tvOS · Apple watchOS +3)
- [CVE-2020-27896](https://cve.now/CVE-2020-27896.md): A path handling issue was addressed with improved validation. (no CVSS, Apple macOS)
- [CVE-2020-25667](https://cve.now/CVE-2020-25667.md): TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for \`"dc:format=\\"image/dng\\"\` w (no CVSS, ImageMagick)
- [CVE-2020-25664](https://cve.now/CVE-2020-25664.md): In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds (no CVSS, ImageMagick)
- [CVE-2020-25663](https://cve.now/CVE-2020-25663.md): A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap- (no CVSS, ImageMagick)
- [CVE-2020-27930](https://cve.now/CVE-2020-27930.md): A memory corruption issue was addressed with improved input validation. (CVSS 7.8, KEV, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-27950](https://cve.now/CVE-2020-27950.md): A memory initialization issue was addressed. (CVSS 5.5, KEV, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-27932](https://cve.now/CVE-2020-27932.md): A type confusion issue was addressed with improved state handling. (CVSS 7.8, KEV, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-27929](https://cve.now/CVE-2020-27929.md): A logic issue existed in the handling of Group FaceTime calls. (no CVSS, Apple iOS)
- [CVE-2020-27917](https://cve.now/CVE-2020-27917.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27926](https://cve.now/CVE-2020-27926.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-27916](https://cve.now/CVE-2020-27916.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27927](https://cve.now/CVE-2020-27927.md): An out-of-bounds write issue was addressed with improved bounds checking. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27925](https://cve.now/CVE-2020-27925.md): An issue existed in the handling of incoming calls. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-27911](https://cve.now/CVE-2020-27911.md): An integer overflow was addressed through improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27912](https://cve.now/CVE-2020-27912.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27909](https://cve.now/CVE-2020-27909.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-27910](https://cve.now/CVE-2020-27910.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27905](https://cve.now/CVE-2020-27905.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-27906](https://cve.now/CVE-2020-27906.md): Multiple integer overflows were addressed with improved input validation. (no CVSS, Apple macOS)
- [CVE-2020-27902](https://cve.now/CVE-2020-27902.md): An authentication issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-27898](https://cve.now/CVE-2020-27898.md): A denial of service issue was addressed with improved state handling. (no CVSS, Apple macOS)
- [CVE-2020-27904](https://cve.now/CVE-2020-27904.md): A logic issue existed resulting in memory corruption. (no CVSS, Apple macOS)
- [CVE-2020-27903](https://cve.now/CVE-2020-27903.md): This issue was addressed by removing the vulnerable code. (no CVSS, Apple macOS)
- [CVE-2020-27900](https://cve.now/CVE-2020-27900.md): An issue existed in the handling of snapshots. (no CVSS, Apple macOS)
- [CVE-2020-10017](https://cve.now/CVE-2020-10017.md): An out-of-bounds write was addressed with improved input validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-27895](https://cve.now/CVE-2020-27895.md): An information disclosure issue existed in the transition of program state. (no CVSS, Apple iTunes for Windows)
- [CVE-2020-27894](https://cve.now/CVE-2020-27894.md): The issue was addressed with additional user controls. (no CVSS, Apple macOS)
- [CVE-2020-10014](https://cve.now/CVE-2020-10014.md): A parsing issue in the handling of directory paths was addressed with improved path validation. (no CVSS, Apple macOS)
- [CVE-2020-10016](https://cve.now/CVE-2020-10016.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-10012](https://cve.now/CVE-2020-10012.md): An access issue was addressed with improved access restrictions. (no CVSS, Apple macOS)
- [CVE-2020-10007](https://cve.now/CVE-2020-10007.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-10011](https://cve.now/CVE-2020-10011.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple macOS)
- [CVE-2020-10003](https://cve.now/CVE-2020-10003.md): An issue existed within the path validation logic for symlinks. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-10004](https://cve.now/CVE-2020-10004.md): A logic issue was addressed with improved state management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-10013](https://cve.now/CVE-2020-10013.md): A logic issue was addressed with improved state management. (no CVSS, Apple tvOS · Apple iOS and iPadOS)
- [CVE-2020-10010](https://cve.now/CVE-2020-10010.md): A path handling issue was addressed with improved validation. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-10009](https://cve.now/CVE-2020-10009.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-9996](https://cve.now/CVE-2020-9996.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-10006](https://cve.now/CVE-2020-10006.md): This issue was addressed with improved entitlements. (no CVSS, Apple macOS)
- [CVE-2020-9989](https://cve.now/CVE-2020-9989.md): The issue was addressed with improved deletion. (no CVSS, Apple watchOS · Apple iOS and iPadOS +1)
- [CVE-2020-9974](https://cve.now/CVE-2020-9974.md): A logic issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-10002](https://cve.now/CVE-2020-10002.md): A logic issue was addressed with improved state management. (no CVSS, Apple watchOS · Apple iOS and iPadOS +2)
- [CVE-2020-26233](https://cve.now/CVE-2020-26233.md): Remote Code Execution in Git Credential Manager Core (CVSS 7.3, microsoft Git-Credential-Manager-Core)
- [CVE-2020-14207](https://cve.now/CVE-2020-14207.md): The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data fro (no CVSS)
- [CVE-2020-14206](https://cve.now/CVE-2020-14206.md): The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter). (no CVSS)
- [CVE-2020-14205](https://cve.now/CVE-2020-14205.md): The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization c (no CVSS)
- [CVE-2020-28946](https://cve.now/CVE-2020-28946.md): An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network access to the device) (no CVSS)
- [CVE-2020-9999](https://cve.now/CVE-2020-9999.md): A memory corruption issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-9993](https://cve.now/CVE-2020-9993.md): The issue was addressed with improved UI handling. (no CVSS, Apple watchOS · Apple Safari +1)
- [CVE-2020-9965](https://cve.now/CVE-2020-9965.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9969](https://cve.now/CVE-2020-9969.md): An access issue was addressed with additional sandbox restrictions. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9987](https://cve.now/CVE-2020-9987.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple Safari)
- [CVE-2020-9988](https://cve.now/CVE-2020-9988.md): The issue was addressed with improved deletion. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-9981](https://cve.now/CVE-2020-9981.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple tvOS · Apple watchOS +1)
- [CVE-2020-9977](https://cve.now/CVE-2020-9977.md): A validation issue existed in the entitlement verification. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-9963](https://cve.now/CVE-2020-9963.md): The issue was addressed with improved handling of icon caches. (no CVSS, Apple iOS and iPadOS · Apple macOS)
- [CVE-2020-9949](https://cve.now/CVE-2020-9949.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple macOS)
- [CVE-2020-9972](https://cve.now/CVE-2020-9972.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple iOS and iPadOS)
- [CVE-2020-9943](https://cve.now/CVE-2020-9943.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9947](https://cve.now/CVE-2020-9947.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple tvOS · Apple watchOS +4)
- [CVE-2020-9966](https://cve.now/CVE-2020-9966.md): An out-of-bounds read was addressed with improved input validation. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9950](https://cve.now/CVE-2020-9950.md): A use after free issue was addressed with improved memory management. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9954](https://cve.now/CVE-2020-9954.md): A buffer overflow issue was addressed with improved memory handling. (no CVSS, Apple tvOS · Apple watchOS +1)
- [CVE-2020-9849](https://cve.now/CVE-2020-9849.md): An information disclosure issue was addressed with improved state management. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9945](https://cve.now/CVE-2020-9945.md): A spoofing issue existed in the handling of URLs. (no CVSS, Apple macOS)
- [CVE-2020-9944](https://cve.now/CVE-2020-9944.md): An out-of-bounds read was addressed with improved bounds checking. (no CVSS, Apple tvOS · Apple watchOS +2)
- [CVE-2020-9922](https://cve.now/CVE-2020-9922.md): A logic issue was addressed with improved state management. (no CVSS, Apple macOS)
- [CVE-2020-9942](https://cve.now/CVE-2020-9942.md): An inconsistent user interface issue was addressed with improved state management. (no CVSS, Apple Safari · Apple macOS)
- [CVE-2020-1971](https://cve.now/CVE-2020-1971.md): EDIPARTYNAME NULL pointer dereference (CVSS 5.9, OpenSSL)
- [CVE-2020-29576](https://cve.now/CVE-2020-29576.md): The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. (no CVSS)
- [CVE-2020-29564](https://cve.now/CVE-2020-29564.md): The official Consul Docker images 0.7.1 through 1.4.2 contain a blank password for a root user. (no CVSS)
- [CVE-2020-29575](https://cve.now/CVE-2020-29575.md): The official elixir Docker images before 1.8.0-alpine (Alpine specific) contain a blank password for a root user. (no CVSS)
- [CVE-2020-29577](https://cve.now/CVE-2020-29577.md): The official znc docker images before 1.7.1-slim contain a blank password for a root user. (no CVSS)
- [CVE-2020-29580](https://cve.now/CVE-2020-29580.md): The official storm Docker images before 1.2.1 contain a blank password for a root user. (no CVSS)
- [CVE-2020-29602](https://cve.now/CVE-2020-29602.md): The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. (no CVSS)
- [CVE-2020-29601](https://cve.now/CVE-2020-29601.md): The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. (no CVSS)
- [CVE-2020-29581](https://cve.now/CVE-2020-29581.md): The official spiped docker images before 1.5-alpine contain a blank password for a root user. (no CVSS)
- [CVE-2020-29579](https://cve.now/CVE-2020-29579.md): The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. (no CVSS)
- [CVE-2020-29578](https://cve.now/CVE-2020-29578.md): The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. (no CVSS)
- [CVE-2020-26255](https://cve.now/CVE-2020-26255.md): PHP Phar archives could be uploaded and executed in Kirby (CVSS 6.8, getkirby kirby · getkirby/panel +1)
- [CVE-2020-26254](https://cve.now/CVE-2020-26254.md): omniauth-apple allows attacker to fake their email address during authentication (CVSS 7.7, nhosoya omniauth-apple · omniauth-apple)
- [CVE-2020-25955](https://cve.now/CVE-2020-25955.md): SourceCodester Student Management System Project in PHP version 1.0 is vulnerable to stored a cross-site scripting (XSS) via the 'add subjec (no CVSS)
- [CVE-2020-25889](https://cve.now/CVE-2020-25889.md): Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. (no CVSS)
- [CVE-2020-29539](https://cve.now/CVE-2020-29539.md): A Cross-Site Scripting (XSS) issue in WebUI Translation in Systran Pure Neural Server before 9.7.0 allows a threat actor to have a remote au (no CVSS)
- [CVE-2020-29540](https://cve.now/CVE-2020-29540.md): API calls in the Translation API feature in Systran Pure Neural Server before 9.7.0 allow a threat actor to use the Systran Pure Neural Serv (no CVSS)
- [CVE-2020-26253](https://cve.now/CVE-2020-26253.md): .dev domains treated as local in Kirby (CVSS 6.8, getkirby kirby · getkirby/panel +1)
- [CVE-2020-25628](https://cve.now/CVE-2020-25628.md): The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. (no CVSS, Moodle · moodle/moodle)
- [CVE-2020-25629](https://cve.now/CVE-2020-25629.md): A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access (no CVSS, Moodle · moodle/moodle)
- [CVE-2020-25630](https://cve.now/CVE-2020-25630.md): A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping t (no CVSS, Moodle · moodle/moodle)
- [CVE-2020-25631](https://cve.now/CVE-2020-25631.md): A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chap (no CVSS, Moodle · moodle/moodle)
- [CVE-2020-27822](https://cve.now/CVE-2020-27822.md): A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. (no CVSS, wildfly · org.wildfly:wildfly-parent)
- [CVE-2020-25692](https://cve.now/CVE-2020-25692.md): A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. (no CVSS, openldap)
- [CVE-2020-27818](https://cve.now/CVE-2020-27818.md): A flaw was found in the check\_chunk\_name() function of pngcheck-2.4.0. (no CVSS, pngcheck)
- [CVE-2020-25677](https://cve.now/CVE-2020-25677.md): A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. (no CVSS, ceph-ansible)
- [CVE-2020-17531](https://cve.now/CVE-2020-17531.md): Deserialization flaw in EOL Tapestry 4. (no CVSS, Apache Software Foundation Apache Tapestry · org.apache.tap…)
- [CVE-2020-25665](https://cve.now/CVE-2020-25665.md): The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be of (no CVSS, ImageMagick)
- [CVE-2020-25666](https://cve.now/CVE-2020-25666.md): There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. (no CVSS, ImageMagick)
- [CVE-2020-25674](https://cve.now/CVE-2020-25674.md): WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via (no CVSS, ImageMagick)
- [CVE-2020-25675](https://cve.now/CVE-2020-25675.md): In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets (no CVSS, ImageMagick)
- [CVE-2020-25676](https://cve.now/CVE-2020-25676.md): In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all func (no CVSS, ImageMagick)
- [CVE-2020-27750](https://cve.now/CVE-2020-27750.md): A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. (no CVSS, ImageMagick)
- [CVE-2020-27751](https://cve.now/CVE-2020-27751.md): A flaw was found in ImageMagick in MagickCore/quantum-export.c. (no CVSS, ImageMagick)
- [CVE-2020-27754](https://cve.now/CVE-2020-27754.md): In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller wh (no CVSS, ImageMagick)
- [CVE-2020-27756](https://cve.now/CVE-2020-27756.md): In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead t (no CVSS, ImageMagick)
- [CVE-2020-27757](https://cve.now/CVE-2020-27757.md): A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a (no CVSS, ImageMagick)
- [CVE-2020-27758](https://cve.now/CVE-2020-27758.md): A flaw was found in ImageMagick in coders/txt.c. (no CVSS, ImageMagick)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.