# CVEs published 2020-12-18

66 CVEs were published on December 18, 2020: 1 critical, 8 high. Days are UTC.

- [CVE-2020-7201](https://cve.now/CVE-2020-7201.md): A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. (no CVSS, HPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape…)
- [CVE-2020-7203](https://cve.now/CVE-2020-7203.md): A potential security vulnerability has been identified in HPE iLO Amplifier Pack server version 1.70. (no CVSS, iLO Amplifier Pack)
- [CVE-2020-7200](https://cve.now/CVE-2020-7200.md): A potential security vulnerability has been identified in HPE Systems Insight Manager (SIM) version 7.6. (no CVSS, HPE Systems Insight Manager)
- [CVE-2020-14224](https://cve.now/CVE-2020-14224.md): A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker result (no CVSS, HCL Notes)
- [CVE-2020-14271](https://cve.now/CVE-2020-14271.md): HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. (no CVSS, HCL iNotes)
- [CVE-2020-4080](https://cve.now/CVE-2020-4080.md): HCL Verse v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. (no CVSS, HCL Verse)
- [CVE-2020-5803](https://cve.now/CVE-2020-5803.md): Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk a (no CVSS, Marvell QConvergeConsole GUI)
- [CVE-2020-17520](https://cve.now/CVE-2020-17520.md): In the Pulsar manager 0.1.0 version, malicious users will be able to bypass pulsar-manager's admin, permission verification mechanism by con (no CVSS, Pulsar Manager)
- [CVE-2020-13535](https://cve.now/CVE-2020-13535.md): A privilege escalation vulnerability exists in Kepware LinkMaster 3.0.94.0. (CVSS 9.3, Kepware)
- [CVE-2020-13519](https://cve.now/CVE-2020-13519.md): A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. (CVSS 8.8, NZXT")
- [CVE-2020-13514](https://cve.now/CVE-2020-13514.md): A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. (CVSS 8.8, NZXT)
- [CVE-2020-13513](https://cve.now/CVE-2020-13513.md): A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. (CVSS 8.8, NZXT)
- [CVE-2020-13512](https://cve.now/CVE-2020-13512.md): A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. (CVSS 8.8, NZXT)
- [CVE-2020-13515](https://cve.now/CVE-2020-13515.md): A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. (CVSS 8.8, NZXT)
- [CVE-2020-20298](https://cve.now/CVE-2020-20298.md): Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz\_template.php in zzzphp 1.7.2 allows remote attack (no CVSS)
- [CVE-2020-20300](https://cve.now/CVE-2020-20300.md): SQL injection vulnerability in the wp\_where function in WeiPHP 5.0. (no CVSS)
- [CVE-2020-20299](https://cve.now/CVE-2020-20299.md): WeiPHP 5.0 does not properly restrict access to pages, related to using POST. (no CVSS)
- [CVE-2020-27687](https://cve.now/CVE-2020-27687.md): ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. (no CVSS)
- [CVE-2020-26280](https://cve.now/CVE-2020-26280.md): XSS in OpenSlides (CVSS 8.9, OpenSlides)
- [CVE-2020-20285](https://cve.now/CVE-2020-20285.md): There is a XSS in the user login page in zzcms 2019. (no CVSS)
- [CVE-2020-20276](https://cve.now/CVE-2020-20276.md): An unauthenticated stack-based buffer overflow vulnerability in common.c's handle\_PORT in uftpd FTP server versions 2.10 and earlier can be (no CVSS)
- [CVE-2020-20277](https://cve.now/CVE-2020-20277.md): There are multiple unauthenticated directory traversal vulnerabilities in different FTP commands in uftpd FTP server versions 2.7 to 2.10 du (no CVSS)
- [CVE-2020-26251](https://cve.now/CVE-2020-26251.md): CORS configuration is possibly vulnerable (CVSS 4.7, open-zaak)
- [CVE-2020-4764](https://cve.now/CVE-2020-4764.md): IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized a (CVSS 4.3, IBM Planning Analytics)
- [CVE-2020-25901](https://cve.now/CVE-2020-25901.md): Host Header Injection in Spiceworks 7.5.7.0 allowing the attacker to render arbitrary links that point to a malicious website with poisoned (no CVSS)
- [CVE-2020-25495](https://cve.now/CVE-2020-25495.md): A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Openserver version 5 and 6 allows remote attackers to inject ar (no CVSS)
- [CVE-2020-25494](https://cve.now/CVE-2020-25494.md): Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevel (no CVSS)
- [CVE-2020-26171](https://cve.now/CVE-2020-26171.md): In tangro Business Workflow before 1.18.1, the documentId of attachment uploads to /api/document/attachments/upload can be manipulated. (CVSS 4.3)
- [CVE-2020-26172](https://cve.now/CVE-2020-26172.md): Every login in tangro Business Workflow before 1.18.1 generates the same JWT token, which allows an attacker to reuse the token when a sessi (CVSS 4.2)
- [CVE-2020-26173](https://cve.now/CVE-2020-26173.md): An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by provi (CVSS 3.1)
- [CVE-2020-26174](https://cve.now/CVE-2020-26174.md): tangro Business Workflow before 1.18.1 requests a list of allowed filetypes from the server and restricts uploads to the filetypes contained (CVSS 8.8)
- [CVE-2020-26175](https://cve.now/CVE-2020-26175.md): In tangro Business Workflow before 1.18.1, an attacker can manipulate the value of PERSON in requests to /api/profile in order to change pro (CVSS 6.5)
- [CVE-2020-26176](https://cve.now/CVE-2020-26176.md): An issue was discovered in tangro Business Workflow before 1.18.1. (CVSS 4.3)
- [CVE-2020-26177](https://cve.now/CVE-2020-26177.md): In tangro Business Workflow before 1.18.1, a user's profile contains some items that are greyed out and thus are not intended to be edited b (CVSS 4.3)
- [CVE-2020-26178](https://cve.now/CVE-2020-26178.md): In tangro Business Workflow before 1.18.1, knowing an attachment ID, it is possible to download workitem attachments without being authentic (CVSS 5.3)
- [CVE-2019-16955](https://cve.now/CVE-2019-16955.md): SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. (no CVSS)
- [CVE-2019-16957](https://cve.now/CVE-2019-16957.md): SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. (no CVSS)
- [CVE-2020-35548](https://cve.now/CVE-2020-35548.md): An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. (no CVSS)
- [CVE-2020-35549](https://cve.now/CVE-2020-35549.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. (no CVSS)
- [CVE-2020-35550](https://cve.now/CVE-2020-35550.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. (no CVSS)
- [CVE-2020-35551](https://cve.now/CVE-2020-35551.md): An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. (no CVSS)
- [CVE-2020-35552](https://cve.now/CVE-2020-35552.md): An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. (no CVSS)
- [CVE-2020-35553](https://cve.now/CVE-2020-35553.md): An issue was discovered on Samsung mobile devices with Q(10.0) and R(11.0) (Qualcomm SM8250 chipsets) software. (no CVSS)
- [CVE-2020-35554](https://cve.now/CVE-2020-35554.md): An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. (no CVSS)
- [CVE-2020-35555](https://cve.now/CVE-2020-35555.md): An issue was discovered on LG mobile devices with Android OS 10 software. (no CVSS)
- [CVE-2020-35479](https://cve.now/CVE-2020-35479.md): MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. (no CVSS)
- [CVE-2020-35480](https://cve.now/CVE-2020-35480.md): An issue was discovered in MediaWiki before 1.35.1. (no CVSS)
- [CVE-2020-35477](https://cve.now/CVE-2020-35477.md): MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. (no CVSS)
- [CVE-2020-35478](https://cve.now/CVE-2020-35478.md): MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. (no CVSS)
- [CVE-2020-35475](https://cve.now/CVE-2020-35475.md): In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. (no CVSS)
- [CVE-2020-35474](https://cve.now/CVE-2020-35474.md): In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentcha (no CVSS)
- [CVE-2020-27640](https://cve.now/CVE-2020-27640.md): The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within (no CVSS)
- [CVE-2020-27639](https://cve.now/CVE-2020-27639.md): The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attack (no CVSS)
- [CVE-2020-27154](https://cve.now/CVE-2020-27154.md): The chat window of Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.11 and 7.x before 7.0.3 could allow an attacker to gai (no CVSS)
- [CVE-2020-25608](https://cve.now/CVE-2020-25608.md): The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Inj (no CVSS)
- [CVE-2020-25609](https://cve.now/CVE-2020-25609.md): The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insuffic (no CVSS)
- [CVE-2020-27340](https://cve.now/CVE-2020-27340.md): The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malic (no CVSS)
- [CVE-2020-25606](https://cve.now/CVE-2020-25606.md): The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper (no CVSS)
- [CVE-2020-25611](https://cve.now/CVE-2020-25611.md): The AWV portal of Mitel MiCollab before 9.2 could allow an attacker to gain access to conference information by sending arbitrary code due t (no CVSS)
- [CVE-2020-25610](https://cve.now/CVE-2020-25610.md): The AWV component of Mitel MiCollab before 9.2 could allow an attacker to gain access to a web conference due to insufficient access control (no CVSS)
- [CVE-2020-25612](https://cve.now/CVE-2020-25612.md): The NuPoint Messenger of Mitel MiCollab before 9.2 could allow an attacker with escalated privilege to access user files due to insufficient (no CVSS)
- [CVE-2020-24693](https://cve.now/CVE-2020-24693.md): The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insuffici (no CVSS)
- [CVE-2020-28052](https://cve.now/CVE-2020-28052.md): An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. (no CVSS, org.bouncycastle:bcprov-jdk15to18 · org.bouncycastle:bcp… +5)
- [CVE-2020-7838](https://cve.now/CVE-2020-7838.md): A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. (CVSS 8.8, Smilegate STOVE Client)
- [CVE-2020-11974](https://cve.now/CVE-2020-11974.md): In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database. (no CVSS, Apache DolphinScheduler · org.apache.dolphinscheduler:dolph…)
- [CVE-2020-27781](https://cve.now/CVE-2020-27781.md): User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. (no CVSS, Ceph)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.