# CVEs published 2021-01-30

4 CVEs were published on January 30, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2020-17380](https://cve.now/CVE-2020-17380.md): A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. (no CVSS)
- [CVE-2020-14418](https://cve.now/CVE-2020-14418.md): A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. (no CVSS)
- [CVE-2020-15690](https://cve.now/CVE-2020-15690.md): In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character. (no CVSS)
- [CVE-2020-15568](https://cve.now/CVE-2020-15568.md): TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.