2020 CVE Vulnerabilities

21,081 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-36895HIGH7.5EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allow...
CVE-2020-36894HIGH7.5Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated a...
CVE-2020-36893HIGH7.5Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remo...
CVE-2020-36892CRITICAL9.8Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateU...
CVE-2020-36888MEDIUM5.3SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows atta...
CVE-2020-36887HIGH7.5SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database b...
CVE-2020-36886HIGH8.8SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site request forgery vulnerability that allows attackers to creat...
CVE-2020-36885CRITICAL9.8Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allo...
CVE-2020-36884MEDIUM6.9BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery...
CVE-2020-36883HIGH8.1SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerability that allows attac...
CVE-2020-36882HIGH7.5Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory...
CVE-2020-36881HIGH7.8Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows ...
CVE-2020-36880HIGH7.8Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that ...
CVE-2020-36879HIGH8.5Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabl...
CVE-2020-36878HIGH8.7ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed throug...
CVE-2020-36877CRITICAL9.3ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows a...
CVE-2020-36876HIGH8.7ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0....
CVE-2020-36874HIGH8.7ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/...
CVE-2020-36873HIGH8.7Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnera...
CVE-2020-36872HIGH8.7BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP ...
CVE-2020-36871HIGH8.7ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi351...
CVE-2020-36870CRITICAL9.2Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerabi...
CVE-2020-36869HIGH7.2Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitati...
CVE-2020-36868HIGH7.8Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The s...
CVE-2020-36867HIGH8.8Nagios XI versions prior to 5.7.3 contain a command injection vulnerability in the report PDF download/export functional...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now