2020 CVE Vulnerabilities
21,081 CVEs published in 2020.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2020-36918 | MEDIUM | 5.1 | 0.1% | Jan 6, 2026 | iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perf... |
| CVE-2020-36917 | HIGH | 8.6 | 0.3% | Jan 6, 2026 | iDS6 DSSPro Digital Signage System 6.2 contains a sensitive information disclosure vulnerability that allows remote atta... |
| CVE-2020-36916 | HIGH | 8.8 | 0.2% | Jan 6, 2026 | TDM Digital Signage PC Player 4.1.0.4 contains an elevation of privileges vulnerability that allows authenticated users ... |
| CVE-2020-36915 | HIGH | 8.7 | 0.3% | Jan 6, 2026 | Adtec Digital SignEdje Digital Signage Player v2.08.28 contains multiple hardcoded default credentials that allow unauth... |
| CVE-2020-36914 | HIGH | 8.6 | 0.3% | Jan 6, 2026 | QiHang Media Web Digital Signage 3.0.9 contains a sensitive information disclosure vulnerability that allows remote atta... |
| CVE-2020-36913 | HIGH | 8.5 | 0.3% | Jan 6, 2026 | All-Dynamics Software enlogic:show 2.0.2 contains a session fixation vulnerability that allows attackers to set a predef... |
| CVE-2020-36912 | CRITICAL | 9.8 | 0.4% | Jan 6, 2026 | Plexus anblick Digital Signage Management 3.1.13 contains an open redirect vulnerability in the 'PantallaLogin' script t... |
| CVE-2020-36910 | HIGH | 8.8 | 1.3% | Jan 6, 2026 | Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard... |
| CVE-2020-36909 | HIGH | 8.8 | 0.6% | Jan 6, 2026 | SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to re... |
| CVE-2020-36908 | HIGH | 8.8 | 0.2% | Jan 6, 2026 | SnapGear Management Console SG560 version 3.1.5 contains a cross-site request forgery vulnerability that allows attacker... |
| CVE-2020-36907 | HIGH | 8.7 | 0.5% | Jan 6, 2026 | Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to ... |
| CVE-2020-36906 | MEDIUM | 5.3 | 0.1% | Jan 6, 2026 | P5 FNIP-8x16A FNIP-4xSH 1.0.20 contains a cross-site request forgery vulnerability that allows attackers to perform admi... |
| CVE-2020-36905 | HIGH | 7.5 | 0.4% | Jan 6, 2026 | FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows... |
| CVE-2020-36904 | HIGH | 7.5 | 0.5% | Dec 31, 2025 | Selea CarPlateServer 4.0.1.6 contains a remote program execution vulnerability that allows attackers to execute arbitrar... |
| CVE-2020-36903 | HIGH | 8.4 | 0.1% | Dec 31, 2025 | Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that a... |
| CVE-2020-36891 | MEDIUM | 5.4 | 0.2% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to upload files with spoofed Content-T... |
| CVE-2020-36890 | HIGH | 8.6 | 0.3% | Dec 18, 2025 | An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user pr... |
| CVE-2020-36889 | MEDIUM | 5.4 | 0.2% | Dec 18, 2025 | A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via error ... |
| CVE-2020-36902 | CRITICAL | 9.8 | 1.0% | Dec 10, 2025 | UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escal... |
| CVE-2020-36901 | HIGH | 8.8 | 0.3% | Dec 10, 2025 | UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to cre... |
| CVE-2020-36900 | HIGH | 8.8 | 0.2% | Dec 10, 2025 | All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to c... |
| CVE-2020-36899 | HIGH | 7.5 | 0.8% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote atta... |
| CVE-2020-36898 | CRITICAL | 9.1 | 1.5% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint t... |
| CVE-2020-36897 | CRITICAL | 9.8 | 1.1% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx fi... |
| CVE-2020-36896 | HIGH | 7.5 | 0.8% | Dec 10, 2025 | QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attack... |
Check if your code is affected by 2020 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now