Week 45, 2020

2–8 November 2020

New CVEs: 292
Critical: 14
High: 39
Newly exploited: 0
Advisories: 322
Malicious pkgs: 0

Newly exploited 0

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

No newly exploited vulnerabilities were reported this week.

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 9.8
CVE-2020-16846 SaltStack Salt Command Injection in netapi ssh client
EPSS 100%
Critical 9.8
CVE-2020-27955 Git LFS can execute a Git binary from the current directory
EPSS 82%
Critical 9.1
CVE-2020-26214 LDAP authentication bypass in Alerta
alerta · alerta

EPSS 66%
Critical 9.6
CVE-2020-15999 Heap buffer overflow in CefSharp
Google · Chrome

EPSS 64%
Critical 9.8
CVE-2020-25592 SaltStack Salt Improper Validation of eauth credentials and tokens in salt-netapi
EPSS 58%
Critical 9.8
CVE-2020-17510 Authentication bypass in Apache Shiro
EPSS 8%
Critical 9.6
CVE-2020-16010 Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially…
Google · Chrome

EPSS 6.4%
Critical 9.8
CVE-2020-26892 Incorrect handling of credential expiry by /nats-io/nats-server
EPSS 2.3%
Critical 9.8
CVE-2020-2301 Authentication cache in Active Directory Jenkins Plugin allows logging in with any password
Jenkins Project · Jenkins Active Directory Plugin

EPSS 1.7%
Critical 9.8
CVE-2020-2300 Improper Authentication (empty password) in Jenkins Active Directory Plugin
Jenkins Project · Jenkins Active Directory Plugin

EPSS 1.7%
Critical 9.8
CVE-2020-2299 Improper Authentication in Jenkins Active Directory Plugin
Jenkins Project · Jenkins Active Directory Plugin

EPSS 1.3%
Critical 9.3
CVE-2020-13536 An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector …
Critical 9.3
CVE-2020-13537 An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector …
Critical 9.3
CVE-2020-15708 Libvirt Service Arbitrary File Write Privilege Escalation Vulnerability
Ubuntu · libvirt

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Unscored
CVE-2020-28347 tdpServer on TP-Link Archer A7 AC1750 devices before 201029 allows remote attackers to execute arbitrary code via the slave_mac parameter. NOTE: this issue exi…
EPSS 75%
Unscored
CVE-2020-24881 SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.
EPSS 73%
Unscored
CVE-2020-28328 SuiteCRM before 7.11.17 is vulnerable to remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account …
EPSS 63%
Medium 6.5
CVE-2020-27128 Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability
Cisco · Cisco SD-WAN vManage

EPSS 59%
High 7.8
CVE-2020-24435 Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code Execution
Adobe · Acrobat Reader

EPSS 53%
High 8.8
CVE-2020-16009 Inappropriate implementation in V8
Google · Chrome

EPSS 48%
High 7.8
CVE-2020-24437 Acrobat Reader DC Use-After-Free Vulnerability Could Lead to Arbitrary Code Execution
Adobe · Acrobat Reader

EPSS 47%
Unscored
CVE-2020-14425 Foxit Reader before 10.0 allows Remote Command Execution via the app.opencPDFWebPage JavsScript API. An attacker can execute local files and bypass the securit…
EPSS 31%

Advisories

openSUSE-SU-2020:1829-1 Security update for chromium, gn 39 CVEs
SUSE-SU-2020:3160-1 Security update for rmt-server 16 CVEs
SUSE-SU-2020:3147-1 Security update for rmt-server 16 CVEs
ICSA-20-310-02 Mitsubishi Electric GT14 Model of GOT1000 Series 6 CVEs
SUSE-SU-2020:3235-1 Security update for SUSE Manager Server 4.1 4 CVEs
openSUSE-SU-2020:1868-1 Security update for salt 3 CVEs
SUSE-SU-2020:3251-1 Security update for SUSE Manager 3.2 3 CVEs
SUSE-SU-2020:3250-1 Security update for SUSE Manager 4.0 3 CVEs
SUSE-SU-2020:14538-1 Security update for SUSE Manager Client Tools 3 CVEs
SUSE-SU-2020:3245-1 Security update for Salt 3 CVEs