# CVEs published 2020-12-28

45 CVEs were published on December 28, 2020: 1 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2020-26287](https://cve.now/CVE-2020-26287.md): Stored XSS in mermaid diagrams (CVSS 8.7, hedgedoc)
- [CVE-2020-26286](https://cve.now/CVE-2020-26286.md): Arbitary file upload (CVSS 7.5, hedgedoc)
- [CVE-2020-13476](https://cve.now/CVE-2020-13476.md): NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module. (no CVSS)
- [CVE-2020-13474](https://cve.now/CVE-2020-13474.md): In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functional (no CVSS)
- [CVE-2020-13473](https://cve.now/CVE-2020-13473.md): NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file. (no CVSS)
- [CVE-2020-27172](https://cve.now/CVE-2020-27172.md): An issue was discovered in G-Data before 25.5.9.25 using Symbolic links, it is possible to abuse the infected-file restore mechanism to achi (no CVSS)
- [CVE-2020-35616](https://cve.now/CVE-2020-35616.md): \[20201107\] - Core - Write ACL violation in multiple core views (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35615](https://cve.now/CVE-2020-35615.md): \[20201106\] - Core - CSRF in com\_privacy emailexport feature (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35614](https://cve.now/CVE-2020-35614.md): \[20201105\] - Core - User Enumeration in backend login (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35613](https://cve.now/CVE-2020-35613.md): \[20201104\] - Core - SQL injection in com\_users list view (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35612](https://cve.now/CVE-2020-35612.md): \[20201103\] - Core - Path traversal in mod\_random\_image (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35611](https://cve.now/CVE-2020-35611.md): \[20201102\] - Core - Disclosure of secrets in Global Configuration page (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35610](https://cve.now/CVE-2020-35610.md): \[20201101\] - Core - com\_finder ignores access levels on autosuggest (no CVSS, Joomla! Project Joomla! CMS)
- [CVE-2020-35730](https://cve.now/CVE-2020-35730.md): An XSS issue was discovered in Roundcube Webmail before 1.2.13, 1.3.x before 1.3.16, and 1.4.x before 1.4.10. (CVSS 6.1, KEV)
- [CVE-2020-25507](https://cve.now/CVE-2020-25507.md): An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to ex (no CVSS)
- [CVE-2020-35766](https://cve.now/CVE-2020-35766.md): The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkey (no CVSS)
- [CVE-2020-26290](https://cve.now/CVE-2020-26290.md): Critical security issues in XML encoding in Dex (CVSS 9.3, dexidp dex · github.com/dexidp/dex +1)
- [CVE-2020-14273](https://cve.now/CVE-2020-14273.md): HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. (no CVSS, HCL Domino)
- [CVE-2020-26289](https://cve.now/CVE-2020-26289.md): Regular expression Denial of Service in date-and-time (CVSS 7.5, knowledgecode date-and-time · date-and-time)
- [CVE-2020-27837](https://cve.now/CVE-2020-27837.md): A flaw was found in GDM in versions prior to 3.38.2.1. (no CVSS, gdm)
- [CVE-2020-15898](https://cve.now/CVE-2020-15898.md): In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. (no CVSS)
- [CVE-2020-24360](https://cve.now/CVE-2020-24360.md): An issue with ARP packets in Arista’s EOS affecting the 7800R3, 7500R3, and 7280R3 series of products may result in issues that cause a kern (no CVSS)
- [CVE-2020-26569](https://cve.now/CVE-2020-26569.md): In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incor (no CVSS)
- [CVE-2020-35627](https://cve.now/CVE-2020-35627.md): Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute a (no CVSS)
- [CVE-2020-26028](https://cve.now/CVE-2020-26028.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26029](https://cve.now/CVE-2020-26029.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26030](https://cve.now/CVE-2020-26030.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26031](https://cve.now/CVE-2020-26031.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26032](https://cve.now/CVE-2020-26032.md): An SSRF issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26033](https://cve.now/CVE-2020-26033.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26034](https://cve.now/CVE-2020-26034.md): An account-enumeration issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-26035](https://cve.now/CVE-2020-26035.md): An issue was discovered in Zammad before 3.4.1. (no CVSS)
- [CVE-2020-29158](https://cve.now/CVE-2020-29158.md): An issue was discovered in Zammad before 3.5.1. (no CVSS)
- [CVE-2020-29159](https://cve.now/CVE-2020-29159.md): An issue was discovered in Zammad before 3.5.1. (no CVSS)
- [CVE-2020-29160](https://cve.now/CVE-2020-29160.md): An issue was discovered in Zammad before 3.5.1. (no CVSS)
- [CVE-2020-29245](https://cve.now/CVE-2020-29245.md): dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readAtomData. (no CVSS, github.com/dhowden/tag)
- [CVE-2020-29244](https://cve.now/CVE-2020-29244.md): dhowden tag before 2020-11-19 allows "panic: runtime error: slice bounds out of range" via readTextWithDescrFrame. (no CVSS, github.com/dhowden/tag)
- [CVE-2020-29243](https://cve.now/CVE-2020-29243.md): dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame. (no CVSS, github.com/dhowden/tag)
- [CVE-2020-29242](https://cve.now/CVE-2020-29242.md): dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readPICFrame. (no CVSS, github.com/dhowden/tag)
- [CVE-2020-29194](https://cve.now/CVE-2020-29194.md): Panasonic Security System WV-S2231L 4.25 allows a denial of service of the admin control panel (which will require a physical reset to resto (no CVSS)
- [CVE-2020-29193](https://cve.now/CVE-2020-29193.md): Panasonic Security System WV-S2231L 4.25 has an insecure hard-coded password of lkjhgfdsa (which is just the asdf keyboard row in reverse or (no CVSS)
- [CVE-2020-28096](https://cve.now/CVE-2020-28096.md): FOSCAM FHD X1 1.14.2.4 devices allow attackers (with physical UART access) to login via the ipc.fos~ password. (no CVSS)
- [CVE-2020-28094](https://cve.now/CVE-2020-28094.md): On Tenda AC1200 (Model AC6) 15.03.06.51\_multi devices, the default settings for the router speed test contain links to download malware name (no CVSS)
- [CVE-2020-28093](https://cve.now/CVE-2020-28093.md): On Tenda AC1200 (Model AC6) 15.03.06.51\_multi devices, admin, support, user, and nobody have a password of 1234. (no CVSS)
- [CVE-2020-35738](https://cve.now/CVE-2020-35738.md): WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack\_utils.c because of an integer overflow in a malloc argument. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-12-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.