Learn More about Benny Czarny's Book Cybersecurity Upside Down

Learn More
We utilize artificial intelligence for site translations, and while we strive for accuracy, they may not always be 100% precise. Your understanding is appreciated.
Home/Blog/OPSWAT CVEs, Hashes, Application Installers Update: December 2 - December 9, 2020
Product Announcements

OPSWAT CVEs, Hashes, Application Installers Update: December 2 - December 9, 2020

By OPSWAT
Share this Post

The OPSWAT Vulnerability Assessment technology supports file based and endpoint application vulnerability assessment. Learn how MetaDefender Kiosk and MetaDefender Access leverages this technology to protect your organization.

We continuously enhance our platform to decrease your organization's security risk and prevent malware attacks. The first table below lists the hashes of vulnerable application installers, IoT software and firmware was added to the OPSWAT database during December 2 - December 9, 2020. The second table lists the new CVEs and application versions for which support was added.

To take advantage of these capabilities, please always update your OPSWAT Vulnerability Engine to the latest version. If you have questions or interest in using the engine to better protect your organization, please contact OPSWAT.

File Based Vulnerabilities

OPSWAT Vulnerability Engine added support to detect the following vulnerable application installers, IoT software and firmware

HASH

CVES

147032750709FAE3D50D52942AFAAFFF4B3F6265

CVE-2017-3065, CVE-2017-3057, CVE-2017-3056, CVE-2017-3055, CVE-2017-3054, ...

21A80955F90B00E74B37EB65E865EA78094E6EC9

CVE-2020-13699, CVE-2019-18988, CVE-2019-18196, CVE-2018-16550, CVE-2018-14333, ...

6174E0F7EDB3DA0092B0D8C535D5661D5BBDFFAD

CVE-2020-9687, CVE-2020-9686, CVE-2020-9685, CVE-2020-9684, CVE-2020-9683, ...

68521727931B1261592278F50B3BE06E38AD0DDE

CVE-2015-7985

6A28E969C81C5429BD71B45F49732C3A1B4C06C6

CVE-2020-8103, CVE-2020-8093, CVE-2020-8092

72EDFE5CE42F98007029F9E66D39E010431D107A

CVE-2015-7985

755203F2BD7FAF11ACEE92B8E1C23F862FAAB730

CVE-2020-13699, CVE-2019-18988, CVE-2019-18196, CVE-2018-16550, CVE-2018-14333, ...

903EA4C44B8B622476978F6381926C06A002169F

CVE-2018-20253, CVE-2018-20252, CVE-2018-20251, CVE-2018-20250, CVE-2015-5663, ...

A86C8DE1E0AF6661D755769E8A8CC002C61A5F44

CVE-2020-3990, CVE-2020-3989, CVE-2020-3988, CVE-2020-3987, CVE-2020-3986, ...

A9457E9C6A3755508511A9523E3802BD9191A779

CVE-2020-3990, CVE-2020-3989, CVE-2020-3988, CVE-2020-3987, CVE-2020-3986, ...

B3F994BB9A7F65DD2CE5B4232E01B00511FE5C32

CVE-2018-20253, CVE-2018-20252, CVE-2018-20251, CVE-2018-20250

B6B82B7994AF6AA0B3F77E7B927BDD0B0B63E459

CVE-2017-17429, CVE-2017-16557, CVE-2017-16556, CVE-2017-16555, CVE-2017-16554, ...

B9D66308511A0B67016451418136CF14AEA4211F

CVE-2020-17100, CVE-2020-1393, CVE-2020-1293, CVE-2020-1278, CVE-2020-1257, ...

BA07C72F1DA2EA9A2633EBB8D3A454DA5DD65C21

CVE-2015-7985

BCF184624F2057424743D73AA527B59E5D392C6A

CVE-2015-7985

C5BBC21A2B41D759180DC755C6B3636047EE5F94

CVE-2020-3990, CVE-2020-3989, CVE-2020-3988, CVE-2020-3987, CVE-2020-3986, ...

D0DF69A58A83AB5D4C60B1811CD606E2B2490948

CVE-2015-7985

E32277593084C2B18862FF1A076B9B8FCDD8B18B

CVE-2020-3990, CVE-2020-3989, CVE-2020-3988, CVE-2020-3987, CVE-2020-3986, ...

EC10C8A21267B5126AA54506CDA0400E303C3995

CVE-2015-7985

863DCB1B43F9C4EB7273335CF67A7606A8A2F04D

CVE-2020-2959, CVE-2020-2958, CVE-2020-2951, CVE-2020-2929, CVE-2020-2914, ...

FF7F737B3B14426CB8CBB418B8D5A653D822E47E

CVE-2020-3990, CVE-2020-3989, CVE-2020-3988, CVE-2020-3987, CVE-2020-3986, ...

00B89D2AE0C529DBA39F0C6CDF0F64337FEF9164

CVE-2020-9687, CVE-2020-9686, CVE-2020-9685, CVE-2020-9684, CVE-2020-9683, ...

049B66761591E31C29CDC48CD9097A9F94C6DC6C

CVE-2020-11500

11CFC90501799107CE92136E78AC2A4D089B9F04

CVE-2020-11500

1216ABF427C4DEFAC50CCCD6B4455F7F692112D6

CVE-2014-9323

1235C9083D177FCDA636E44C1F2E0C6DC7B9CB65

CVE-2014-9323

1763E5F7B403754289D3094D80EA50DB5429C8FE

CVE-2020-11500

1EDF91B84494CBA598DCA076D060EA4B9130D55A

CVE-2020-11500

2BFDCA29CC95EF5EA97658BD47BA6430EFC3CB18

CVE-2015-7985

320006691440BD8400A24252BBCEE0D953F59812

CVE-2020-15724, CVE-2020-15723, CVE-2020-15722

336EE5555EB26EFB0209D3192D9965B3D9FFAB62

CVE-2020-11500

337D5E433FC9F359EB1E7C8EA3CC18EC5E6AB496

CVE-2020-11500

34959F5C28874D634050968BD62253A9FC75555D

CVE-2020-11500

3829B7204AFB93910D154E9178AA7AC85C46C6E3

CVE-2020-28864

3980F3053866CD3CF06666B734C9C81798E1CF41

CVE-2020-15724, CVE-2020-15723, CVE-2020-15722

3AB0C856A242C473E1B0DCE03C08405795534812

CVE-2020-11500

54906BA1C9933502EE4AF988A10E63F22A0439D3

CVE-2020-11500

601B0E07E0551FAEBF3AD406669C8BB0A73BDF1F

CVE-2020-11500

667AE8A8D70C1E303292C07852D38A01C80A8365

CVE-2020-11500

698DE540C50F39A8ED3C9A5911870947CF013254

CVE-2020-11500

6C766B76A38100A55A4B45BFCFC0ACB79EFB7845

CVE-2018-20253, CVE-2018-20252, CVE-2018-20251, CVE-2018-20250

724A03944AE4AB565A5998D0EAEDED997A17CB31

CVE-2020-11500

770DC8539BA20AFBB84B30073DBE233C4CBC880A

CVE-2015-7985

7904D702CE22C32D6997AD8CCF13FABD20DFBA2F

CVE-2020-11500

7BF9EC996A12DA3832825FA399240F5F0F89CAF2

CVE-2020-11500

7F3BD5CD0E085AB901212A30836F8A7CDD6234CF

CVE-2020-11500

83575BB55745E62CC8F6294EC631496BAF868CDC

CVE-2020-11500

87FC83077110C40BFEC3000BE007CC64C2FD268F

CVE-2020-15724, CVE-2020-15723, CVE-2020-15722

8DD6C9FD2FF1AD00CE60A951FEF2434F0A1B729F

CVE-2020-11500

Download full list

Endpoint Application Vulnerabilities

OPSWAT Vulnerability Engine added support to detect the following application vulnerabilities

PRODUCT

VENDOR

VERSION

CVE

CVE DETAILS

CVSS SCORE

PHP

The PHP Group

5.0.2 and prior

CVE-2004-1064

https://metadefender.opswat.com/vulnerabilities#!/CVE-2004-1064

10.0

PHP

The PHP Group

5.0.2 and prior

CVE-2004-1063

https://metadefender.opswat.com/vulnerabilities#!/CVE-2004-1063

10.0

PHP

The PHP Group

4.3.09.999998 and prior

CVE-2004-1018

https://metadefender.opswat.com/vulnerabilities#!/CVE-2004-1018

10.0

Xen

Linux Foundation

3.2.999999.999998 and prior

CVE-2011-2519

https://metadefender.opswat.com/vulnerabilities#!/CVE-2011-2519

5.5

Xen

Linux Foundation

4.14 and prior

CVE-2020-27670

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27670

6.9

Xen

Linux Foundation

4.14 and prior

CVE-2020-27671

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27671

6.9

Xen

Linux Foundation

4.14 and prior

CVE-2020-27672

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27672

6.9

Xen

Linux Foundation

4.14 and prior

CVE-2020-27674

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27674

4.6

Xen

Linux Foundation

4.14 and prior

CVE-2020-28368

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-28368

2.1

Xen

Linux Foundation

4.14 and prior

CVE-2020-29040

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-29040

4.6

Xen

Citrix Systems, Inc.

3.2.999999.999998 and prior

CVE-2011-2519

https://metadefender.opswat.com/vulnerabilities#!/CVE-2011-2519

5.5

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-27670

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27670

6.9

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-27671

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27671

6.9

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-27672

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27672

6.9

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-27674

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-27674

4.6

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-28368

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-28368

2.1

Xen

Citrix Systems, Inc.

4.14 and prior

CVE-2020-29040

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-29040

4.6

Microsoft Visual Studio

Microsoft Corporation

16.5 and prior

CVE-2020-1108

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-1108

5.0

TightVNC

GlavSoft LLC.

1.3.10 and prior

CVE-2019-8287

https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-8287

7.5

TightVNC

GlavSoft LLC.

1.3.10 and prior

CVE-2019-15678

https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-15678

7.5

TightVNC

GlavSoft LLC.

1.3.10 and prior

CVE-2019-15679

https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-15679

7.5

TightVNC

GlavSoft LLC.

1.3.10 and prior

CVE-2019-15680

https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-15680

5.0

QEMU

QEMU Team

3.1 and prior

CVE-2018-16872

https://metadefender.opswat.com/vulnerabilities#!/CVE-2018-16872

3.5

Apache HTTP Server

Apache Software Foundation

2.4.45.999998 and prior

CVE-2020-9490

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9490

5.0

Apache HTTP Server

Apache Software Foundation

2.4.43 and prior

CVE-2020-11993

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-11993

4.3

MySQL Server

Oracle Corporation

8.0.17 and prior

CVE-2020-2752

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2752

3.5

MySQL Server

Oracle Corporation

8.0.19 and prior

CVE-2020-2760

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2760

5.5

MySQL Server

Oracle Corporation

8.0.19 and prior

CVE-2020-2812

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2812

4.0

MySQL Server

Oracle Corporation

8.0.18 and prior

CVE-2020-2814

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-2814

4.0

Google Chrome

Google Inc.

86.0.4240.110.999998 and prior

CVE-2020-15999

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-15999

4.3

Google Chrome

Google Inc.

84.0.4147.88.999998 and prior

CVE-2020-6519

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-6519

4.3

Google Chrome

Google Inc.

86.0.4240.110.999998 and prior

CVE-2020-15999

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-15999

4.3

Google Chrome

Google Inc.

84.0.4147.88.999998 and prior

CVE-2020-6519

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-6519

4.3

Google Chrome

Google Inc.

86.0.4240.110.999998 and prior

CVE-2020-15999

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-15999

4.3

Google Chrome

Google Inc.

84.0.4147.88.999998 and prior

CVE-2020-6519

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-6519

4.3

org.jenkins-ci.main:jenkins-core

org.jenkins-ci.main

2.43.999998 and prior

CVE-2017-2599

https://metadefender.opswat.com/vulnerabilities#!/CVE-2017-2599

5.5

MySQL Workbench

Oracle Corporation

8.0.19 and prior

CVE-2019-14889

https://metadefender.opswat.com/vulnerabilities#!/CVE-2019-14889

9.3

Node.js LTS

Joyent, Inc.

15.2.0.999998 and prior

CVE-2020-8277

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-8277

5.0

Node.js Current

Joyent, Inc.

15.2.0.999998 and prior

CVE-2020-8277

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-8277

5.0

Safari

Apple Inc.

13.999999.999998 and prior

CVE-2020-9983

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9983

6.8

Safari

Apple Inc.

13.999999.999998 and prior

CVE-2020-9983

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9983

6.8

VMware Fusion

VMware, Inc.

11.5.6.999998 and prior

CVE-2020-4004

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-4004

4.6

VMware Workstation

VMware, Inc.

15.5.6 build-99999999 and prior

CVE-2020-4004

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-4004

4.6

iCloud

Apple Inc.

7.18.999998 and prior

CVE-2020-9883

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9883

6.8

iTunes

Apple Inc.

12.10.6.999998 and prior

CVE-2020-9883

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9883

6.8

iOS

Apple Inc.

13.5.999998 and prior

CVE-2020-9883

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9883

6.8

iOS

Apple Inc.

13.5.999998 and prior

CVE-2020-9889

https://metadefender.opswat.com/vulnerabilities#!/CVE-2020-9889

6.8

Tags:
Why SBOMs Matter
Sign up for the OPSWAT Newsletter
Get the latest OPSWAT company updates along with event information and the news that's driving the industry forward.
Sign Me Up
Follow Us on Social Media
Follow OPSWAT on your LinkedIn, Facebook, Twitter, and YouTube for more!

Stay Up-to-Date With OPSWAT!

Sign up today to receive the latest company updates, stories, event info, and more.
Subscribe