CVE-2020-25465 - Null Pointer Dereference. in xObjectBindingFromExpression at moddable/xs/sources/xsSyntaxical.c:3419 in Moddable SDK before OS200908 causes a denial of service (SEGV).
Published: December 04, 2020; 12:15:13 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-25464 - Heap buffer overflow at moddable/xs/sources/xsDebug.c in Moddable SDK before before 20200903. The top stack frame is only partially initialized because the stack overflowed while creating the frame. This leads to a crash in the code sending the st... read CVE-2020-25464
Published: December 04, 2020; 12:15:12 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-25463 - Invalid Memory Access in fxUTF8Decode at moddable/xs/sources/xsCommon.c:916 in Moddable SDK before OS200908 causes a denial of service (SEGV).
Published: December 04, 2020; 12:15:12 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-25462 - Heap buffer overflow in the fxCheckArrowFunction function at moddable/xs/sources/xsSyntaxical.c:3562 in Moddable SDK before OS200903.
Published: December 04, 2020; 12:15:12 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-25461 - Invalid Memory Access in the fxProxyGetter function in moddable/xs/sources/xsProxy.c in Moddable SDK before OS200908 causes a denial of service (SEGV).
Published: December 04, 2020; 12:15:12 PM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-13956 - Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Published: December 02, 2020; 12:15:14 PM -0500

V3.1: 5.3 MEDIUM
V2.0: 5.0 MEDIUM

CVE-2020-27816 - The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana console) to different one, created based on the new C... read CVE-2020-27816
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 5.8 MEDIUM

CVE-2020-23741 - In AnyView (network police) network monitoring software 4.6.0.1, there is a local denial of service vulnerability in AnyView, attackers can use a constructed program to cause a computer crash (BSOD).
Published: December 03, 2020; 2:15:12 PM -0500

V3.1: 5.5 MEDIUM
V2.0: 4.9 MEDIUM

CVE-2020-25693 - A flaw was found in CImg in versions prior to 2.9.3. Integer overflows leading to heap buffer overflows in load_pnm() can be triggered by a specially crafted input file processed by CImg, which can lead to an impact to application availability or ... read CVE-2020-25693
Published: December 03, 2020; 12:15:12 PM -0500

V3.1: 8.1 HIGH
V2.0: 5.8 MEDIUM

CVE-2020-14318 - A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
Published: December 03, 2020; 11:15:12 AM -0500

V3.1: 4.3 MEDIUM
V2.0: 4.0 MEDIUM

CVE-2020-23740 - In DriverGenius 9.61.5480.28 there is a local privilege escalation vulnerability in the driver wizard, attackers can use constructed programs to increase user privileges.
Published: December 03, 2020; 2:15:12 PM -0500

V3.1: 7.8 HIGH
V2.0: 4.6 MEDIUM

CVE-2020-4126 - HCL iNotes is susceptible to a sensitive cookie exposure vulnerability. This can allow an unauthenticated remote attacker to capture the cookie by intercepting its transmission within an http session. Fixes are available in HCL Domino and iNotes v... read CVE-2020-4126
Published: November 30, 2020; 7:15:11 PM -0500

V3.1: 5.9 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-14383 - A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authentic... read CVE-2020-14383
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 6.5 MEDIUM
V2.0: 4.0 MEDIUM

CVE-2020-27783 - A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run ar... read CVE-2020-27783
Published: December 03, 2020; 12:15:13 PM -0500

V3.1: 6.1 MEDIUM
V2.0: 4.3 MEDIUM

CVE-2020-25656 - A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vuln... read CVE-2020-25656
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 4.1 MEDIUM
V2.0: 1.9 LOW

CVE-2020-6018 - Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corr... read CVE-2020-6018
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 7.5 HIGH

CVE-2020-14305 - An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a deni... read CVE-2020-14305
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 9.0 HIGH

CVE-2020-12524 - Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display content (Denial of Service).
Published: December 02, 2020; 10:15:12 AM -0500

V3.1: 7.5 HIGH
V2.0: 5.0 MEDIUM

CVE-2020-4102 - HCL Notes is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Notes or execute attacker-controlled code on the client system.
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 6.7 MEDIUM
V2.0: 7.2 HIGH

CVE-2020-14260 - HCL Domino is susceptible to a Buffer Overflow vulnerability in DXL due to improper validation of user input. A successful exploit could enable an attacker to crash Domino or execute attacker-controlled code on the server system.
Published: December 01, 2020; 8:15:12 PM -0500

V3.1: 9.8 CRITICAL
V2.0: 10.0 HIGH