2020 CVE Vulnerabilities
21,069 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36905 | HIGH | 7.5 | 0.4% | Jan 6, 2026 | FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows... |
| CVE-2020-36904 | CRITICAL | 9.3 | 0.4% | Dec 31, 2025 | Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrar... |
| CVE-2020-36903 | HIGH | 8.5 | 0.1% | Dec 31, 2025 | Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that a... |
| CVE-2020-36891 | MEDIUM | 5.4 | 0.2% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to upload files with spoofed Content-T... |
| CVE-2020-36890 | HIGH | 8.6 | 0.3% | Dec 18, 2025 | An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user pr... |
| CVE-2020-36889 | MEDIUM | 5.4 | 0.2% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via error ... |
| CVE-2020-36902 | CRITICAL | 9.8 | 1.0% | Dec 10, 2025 | UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escal... |
| CVE-2020-36901 | HIGH | 8.8 | 0.3% | Dec 10, 2025 | UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to cre... |
| CVE-2020-36900 | HIGH | 8.8 | 0.2% | Dec 10, 2025 | All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to c... |
| CVE-2020-36899 | HIGH | 7.5 | 0.8% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote atta... |
| CVE-2020-36898 | CRITICAL | 9.1 | 1.5% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint t... |
| CVE-2020-36897 | CRITICAL | 9.8 | 1.1% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx fi... |
| CVE-2020-36896 | HIGH | 7.5 | 0.8% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attack... |
| CVE-2020-36895 | HIGH | 7.5 | 0.6% | Dec 10, 2025 | EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allow... |
| CVE-2020-36894 | HIGH | 7.5 | 0.7% | Dec 10, 2025 | Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated a... |
| CVE-2020-36893 | HIGH | 7.5 | 1.3% | Dec 10, 2025 | Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remo... |
| CVE-2020-36892 | CRITICAL | 9.8 | 0.9% | Dec 10, 2025 | Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateU... |
| CVE-2020-36888 | MEDIUM | 5.3 | 0.3% | Dec 10, 2025 | SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows atta... |
| CVE-2020-36887 | HIGH | 7.5 | 0.4% | Dec 10, 2025 | SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database b... |
| CVE-2020-36886 | HIGH | 8.8 | 0.2% | Dec 10, 2025 | SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site request forgery vulnerability that allows attackers to creat... |
| CVE-2020-36885 | CRITICAL | 9.8 | 1.0% | Dec 10, 2025 | Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allo... |
| CVE-2020-36884 | MEDIUM | 6.9 | 0.8% | Dec 10, 2025 | BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery... |
| CVE-2020-36883 | HIGH | 8.1 | 0.8% | Dec 10, 2025 | SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerability that allows attac... |
| CVE-2020-36882 | HIGH | 7.5 | 0.5% | Dec 5, 2025 | Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory... |
| CVE-2020-36881 | HIGH | 7.8 | 0.3% | Dec 5, 2025 | Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows ... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now