CVE-2020-24755

In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).

• CWE-427

• https://www.youtube.com/watch?v=T41h4yeh9dkExploit, Third Party Advisory
• https://www.youtube.com/watch?v=T41h4yeh9dkExploit, Third Party Advisory

Published

May 17, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24740An issue was discovered in Pluck 4.7.10-dev2. There is a CSR…4.3
• CVE-2020-24741Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-24742An issue has been fixed in Qt versions 5.14.0 where QPluginL…7.8
• CVE-2020-24743An issue was found in /showReports.do Zoho ManageEngine Appl…9.8
• CVE-2020-24750FasterXML jackson-databind 2.x before 2.9.10.6 mishandles th…8.1
• CVE-2020-24753A memory corruption vulnerability in Objective Open CBOR Run…9.8
• CVE-2020-24765InterMind iMind Server through 3.13.65 allows remote unauthe…7.5
• CVE-2020-24769SQL injection vulnerability in takeconfirm.php in NexusPHP 1…9.8
• CVE-2020-24770SQL injection vulnerability in modrules.php in NexusPHP 1.5 …9.8
• CVE-2020-24771Incorrect access control in NexusPHP 1.5.beta5.20120707 allo…7.5
• CVE-2020-24772In Dreamacro Clash for Windows v0.11.4, an attacker could em…8.8
• CVE-2020-24786An issue was discovered in Zoho ManageEngine Exchange Report…9.8