# CVEs published 2020-12-14

90 CVEs were published on December 14, 2020: 3 critical, 8 high. Days are UTC.

- [CVE-2020-35460](https://cve.now/CVE-2020-35460.md): common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writin (CVSS 5.3, net.sf.mpxj:mpxj)
- [CVE-2020-35457](https://cve.now/CVE-2020-35457.md): GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g\_option\_group\_add\_entries. (no CVSS)
- [CVE-2020-0019](https://cve.now/CVE-2020-0019.md): In the Broadcom Nexus firmware, there is an insecure default password. (no CVSS, Android)
- [CVE-2020-0016](https://cve.now/CVE-2020-0016.md): In the Broadcom Nexus firmware, there is an insecure default password. (no CVSS, Android)
- [CVE-2020-0456](https://cve.now/CVE-2020-0456.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170378843 (no CVSS, Android)
- [CVE-2020-0455](https://cve.now/CVE-2020-0455.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170372514 (no CVSS, Android)
- [CVE-2020-0457](https://cve.now/CVE-2020-0457.md): There is a possible out of bounds write due to a missing bounds check.Product: AndroidVersions: Android SoCAndroid ID: A-170367562 (no CVSS, Android)
- [CVE-2020-0463](https://cve.now/CVE-2020-0463.md): In sdp\_server\_handle\_client\_req of sdp\_server.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0469](https://cve.now/CVE-2020-0469.md): In addEscrowToken of LockSettingsService.java, there is a possible loss of the synthetic password due to logic error. (no CVSS, Android)
- [CVE-2020-0467](https://cve.now/CVE-2020-0467.md): In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. (no CVSS, Android)
- [CVE-2020-0470](https://cve.now/CVE-2020-0470.md): In extend\_frame\_highbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2020-0460](https://cve.now/CVE-2020-0460.md): In createNameCredentialDialog of CertInstaller.java, there exists the possibility of improperly installed certificates due to a logic error. (no CVSS, Android)
- [CVE-2020-0465](https://cve.now/CVE-2020-0465.md): In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2020-0440](https://cve.now/CVE-2020-0440.md): In createVirtualDisplay of DisplayManagerService.java, there is a possible way to create a trusted virtual display due to a missing permissi (no CVSS, Android)
- [CVE-2020-0458](https://cve.now/CVE-2020-0458.md): In SPDIFEncoder::writeBurstBufferBytes and related methods of SPDIFEncoder.cpp, there is a possible out of bounds write due to an integer ov (no CVSS, Android)
- [CVE-2020-0459](https://cve.now/CVE-2020-0459.md): In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a m (no CVSS, Android)
- [CVE-2020-0468](https://cve.now/CVE-2020-0468.md): In listen() and related functions of TelephonyRegistry.java, there is a possible permissions bypass of location permissions due to a missing (no CVSS, Android)
- [CVE-2020-0444](https://cve.now/CVE-2020-0444.md): In audit\_free\_lsm\_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit\_data\_to\_entry. (no CVSS, Android)
- [CVE-2020-0464](https://cve.now/CVE-2020-0464.md): In resolv\_cache\_lookup of res\_cache.cpp, there is a possible side channel information disclosure. (no CVSS, Android)
- [CVE-2020-0466](https://cve.now/CVE-2020-0466.md): In do\_epoll\_ctl and ep\_loop\_check\_proc of eventpoll.c, there is a possible use after free due to a logic error. (no CVSS, Android)
- [CVE-2020-0099](https://cve.now/CVE-2020-0099.md): In addWindow of WindowManagerService.java, there is a possible window overlay attack due to an insecure default value. (no CVSS, Android)
- [CVE-2020-25232](https://cve.now/CVE-2020-25232.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-25233](https://cve.now/CVE-2020-25233.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-25234](https://cve.now/CVE-2020-25234.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM · Siemens LOGO! Soft Comfort)
- [CVE-2020-25235](https://cve.now/CVE-2020-25235.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-28396](https://cve.now/CVE-2020-28396.md): A vulnerability has been identified in SICAM A8000 CP-8000 (All versions \< V16), SICAM A8000 CP-8021 (All versions \< V16), SICAM A8000 CP-80 (no CVSS, Siemens SICAM A8000 CP-8000 · Siemens SICAM A8000 CP-8021 +1)
- [CVE-2019-19288](https://cve.now/CVE-2019-19288.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2019-19289](https://cve.now/CVE-2019-19289.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2020-15796](https://cve.now/CVE-2020-15796.md): A vulnerability has been identified in SIMATIC ET 200SP Open Controller (incl. (no CVSS, Siemens SIMATIC ET 200SP Open Controller · Siemens SIMATIC…)
- [CVE-2020-25228](https://cve.now/CVE-2020-25228.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-25229](https://cve.now/CVE-2020-25229.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-25230](https://cve.now/CVE-2020-25230.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM)
- [CVE-2020-25231](https://cve.now/CVE-2020-25231.md): A vulnerability has been identified in LOGO! 8 BM (incl. (no CVSS, Siemens LOGO! 8 BM · Siemens LOGO! Soft Comfort)
- [CVE-2019-19283](https://cve.now/CVE-2019-19283.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2019-19284](https://cve.now/CVE-2019-19284.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2019-19285](https://cve.now/CVE-2019-19285.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2019-19286](https://cve.now/CVE-2019-19286.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2019-19287](https://cve.now/CVE-2019-19287.md): A vulnerability has been identified in XHQ (All Versions \< 6.1). (no CVSS, Siemens XHQ)
- [CVE-2020-20189](https://cve.now/CVE-2020-20189.md): SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\\newpost.php. (no CVSS)
- [CVE-2020-14368](https://cve.now/CVE-2020-14368.md): A flaw was found in Eclipse Che in versions prior to 7.14.0 that impacts CodeReady Workspaces. (no CVSS, eclipse)
- [CVE-2020-29509](https://cve.now/CVE-2020-29509.md): The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization (CVSS 9.8, Golang Go · github.com/russellhaering/gosaml2)
- [CVE-2020-29511](https://cve.now/CVE-2020-29511.md): The encoding/xml package in Go (all versions) does not correctly preserve the semantics of element namespace prefixes during tokenization ro (CVSS 9.8, Golang Go)
- [CVE-2020-29510](https://cve.now/CVE-2020-29510.md): The encoding/xml package in Go versions 1.15 and earlier does not correctly preserve the semantics of directives during tokenization round-t (CVSS 9.8, Golang Go)
- [CVE-2020-20184](https://cve.now/CVE-2020-20184.md): GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. (no CVSS)
- [CVE-2020-29304](https://cve.now/CVE-2020-29304.md): A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows atta (no CVSS)
- [CVE-2020-29303](https://cve.now/CVE-2020-29303.md): A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arb (no CVSS)
- [CVE-2020-20183](https://cve.now/CVE-2020-20183.md): Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to ga (no CVSS)
- [CVE-2020-8177](https://cve.now/CVE-2020-8177.md): curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a loca (CVSS 7.8, https://github.com/curl/curl)
- [CVE-2020-8258](https://cve.now/CVE-2020-8258.md): Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15 (no CVSS, Citrix Gateway Plug-in for Windows)
- [CVE-2020-8257](https://cve.now/CVE-2020-8257.md): Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15 (no CVSS, Citrix Gateway Plug-in for Windows)
- [CVE-2020-8169](https://cve.now/CVE-2020-8169.md): curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over th (no CVSS, https://github.com/curl/curl)
- [CVE-2020-8282](https://cve.now/CVE-2020-8282.md): A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have b (no CVSS, EdgePower)
- [CVE-2020-8283](https://cve.now/CVE-2020-8283.md): An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD version (no CVSS, Citrix Virtual Apps and Desktops)
- [CVE-2020-8286](https://cve.now/CVE-2020-8286.md): curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP respon (no CVSS, https://github.com/curl/curl)
- [CVE-2020-8231](https://cve.now/CVE-2020-8231.md): Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data. (no CVSS, https://github.com/curl/curl)
- [CVE-2020-8285](https://cve.now/CVE-2020-8285.md): curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. (CVSS 7.5, https://github.com/curl/curl)
- [CVE-2020-8284](https://cve.now/CVE-2020-8284.md): A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and t (CVSS 3.7, https://github.com/curl/curl)
- [CVE-2020-28861](https://cve.now/CVE-2020-28861.md): OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing u (no CVSS)
- [CVE-2020-16103](https://cve.now/CVE-2020-16103.md): Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. (CVSS 8.8, Gallagher Command Centre)
- [CVE-2020-28860](https://cve.now/CVE-2020-28860.md): OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queri (no CVSS)
- [CVE-2020-16102](https://cve.now/CVE-2020-16102.md): Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with inva (CVSS 7.1, Gallagher Command Centre)
- [CVE-2020-16104](https://cve.now/CVE-2020-16104.md): SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Int (CVSS 8.2, Gallagher Command Centre)
- [CVE-2020-27252](https://cve.now/CVE-2020-27252.md): Medtronic MyCareLink Smart Time-of-check Time-of-use Race Condition (CVSS 8.8, Medtronic Smart Model 25000 Patient Reader)
- [CVE-2020-25187](https://cve.now/CVE-2020-25187.md): Medtronic MyCareLink Smart Heap-based Buffer Overflow (CVSS 8.8, Medtronic Smart Model 25000 Patient Reader)
- [CVE-2020-25183](https://cve.now/CVE-2020-25183.md): Medtronic MyCareLink Smart Improper Authentication (CVSS 8.0, Medtronic Smart Model 25000 Patient Reader)
- [CVE-2020-28859](https://cve.now/CVE-2020-28859.md): OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoint (no CVSS)
- [CVE-2020-28858](https://cve.now/CVE-2020-28858.md): OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentional (no CVSS)
- [CVE-2020-28857](https://cve.now/CVE-2020-28857.md): OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoin (no CVSS)
- [CVE-2020-20136](https://cve.now/CVE-2020-20136.md): QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration o (no CVSS, QuantConnect.Common)
- [CVE-2020-28856](https://cve.now/CVE-2020-28856.md): OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing at (no CVSS)
- [CVE-2020-15733](https://cve.now/CVE-2020-15733.md): URL Spoofing Vulnerability in Bitdefender SafePay (VA-8958) (CVSS 6.5, Bitdefender Antivirus Plus)
- [CVE-2020-35338](https://cve.now/CVE-2020-35338.md): The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default accou (no CVSS)
- [CVE-2020-25175](https://cve.now/CVE-2020-25175.md): GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network. (no CVSS, GE Healthcare Imaging and Ultrasound Products)
- [CVE-2020-25179](https://cve.now/CVE-2020-25179.md): GE Healthcare Imaging and Ultrasound Products may allow specific credentials to be exposed during transport over the network. (no CVSS, GE Healthcare Imaging and Ultrasound Products)
- [CVE-2020-35382](https://cve.now/CVE-2020-35382.md): SQL Injection in Classbooking before 2.4.1 via the username field of a CSV file when adding a new user. (no CVSS)
- [CVE-2020-14268](https://cve.now/CVE-2020-14268.md): A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated at (no CVSS, HCL Notes)
- [CVE-2020-35378](https://cve.now/CVE-2020-35378.md): SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentic (no CVSS)
- [CVE-2020-14244](https://cve.now/CVE-2020-14244.md): A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated a (no CVSS, HCL Domino)
- [CVE-2020-29227](https://cve.now/CVE-2020-29227.md): An issue was discovered in Car Rental Management System 1.0. (no CVSS)
- [CVE-2020-17511](https://cve.now/CVE-2020-17511.md): In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Air (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-17513](https://cve.now/CVE-2020-17513.md): In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. (no CVSS, Apache Software Foundation Apache Airflow · apache-airflow)
- [CVE-2020-35236](https://cve.now/CVE-2020-35236.md): The GitLab Webhook Handler in amazee.io Lagoon before 1.12.3 has incorrect access control associated with project deletion. (no CVSS)
- [CVE-2020-5639](https://cve.now/CVE-2020-5639.md): Directory traversal vulnerability in FileZen versions from V3.0.0 to V4.2.2 allows remote attackers to upload an arbitrary file in a specifi (no CVSS, Soliton Systems K.K. FileZen)
- [CVE-2020-5665](https://cve.now/CVE-2020-5665.md): Improper check or handling of exceptional conditions in MELSEC iQ-F series FX5U(C) CPU unit firmware version 1.060 and earlier allows an att (no CVSS, Mitsubishi Electric MELSEC iQ-F series FX5U(C) CPU unit)
- [CVE-2020-5637](https://cve.now/CVE-2020-5637.md): Improper validation of integrity check value vulnerability in Aterm SA3500G firmware versions prior to Ver. (no CVSS, NEC Aterm SA3500G)
- [CVE-2020-5635](https://cve.now/CVE-2020-5635.md): Aterm SA3500G firmware versions prior to Ver. (no CVSS, NEC Aterm SA3500G)
- [CVE-2020-5636](https://cve.now/CVE-2020-5636.md): Aterm SA3500G firmware versions prior to Ver. (no CVSS, NEC Aterm SA3500G)
- [CVE-2020-35234](https://cve.now/CVE-2020-35234.md): The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. (no CVSS)
- [CVE-2020-35235](https://cve.now/CVE-2020-35235.md): vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper acc (no CVSS)
- [CVE-2020-29669](https://cve.now/CVE-2020-29669.md): In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.