2020 CVE Vulnerabilities

21,069 CVEs published in 2020.

Filter:HIGHClear
CVE IDSeverityCVSSDescription
CVE-2020-36905HIGH7.5FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows...
CVE-2020-36903HIGH8.5Selea CarPlateServer 4.0.1.6 contains an unquoted service path vulnerability in the Windows service configuration that a...
CVE-2020-36890HIGH8.6An access control bypass vulnerability in Kentico Xperience allows administrators to modify global administrator user pr...
CVE-2020-36901HIGH8.8UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to cre...
CVE-2020-36900HIGH8.8All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to c...
CVE-2020-36899HIGH7.5QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote atta...
CVE-2020-36896HIGH7.5QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attack...
CVE-2020-36895HIGH7.5EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allow...
CVE-2020-36894HIGH7.5Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated a...
CVE-2020-36893HIGH7.5Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remo...
CVE-2020-36887HIGH7.5SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database b...
CVE-2020-36886HIGH8.8SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site request forgery vulnerability that allows attackers to creat...
CVE-2020-36883HIGH8.1SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerability that allows attac...
CVE-2020-36882HIGH7.5Flexsense DiskBoss 7.7.14 allows unauthenticated attackers to upload arbitrary files via /Command/Search Files/Directory...
CVE-2020-36881HIGH7.8Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows ...
CVE-2020-36880HIGH7.8Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that ...
CVE-2020-36879HIGH8.5Flexsense DiskBoss 11.7.28 allows unauthenticated attackers to elevate their privileges using any of its services, enabl...
CVE-2020-36878HIGH8.7ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed throug...
CVE-2020-36876HIGH8.7ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0....
CVE-2020-36874HIGH8.7ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/...
CVE-2020-36873HIGH8.7Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnera...
CVE-2020-36872HIGH8.7BACnet Test Server versions up to and including 1.01 contains a remote denial of service vulnerability in its BACnet/IP ...
CVE-2020-36871HIGH8.7ESCAM QD-900 WIFI HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi351...
CVE-2020-36869HIGH7.2Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitati...
CVE-2020-36868HIGH7.8Nagios XI versions prior to 5.7.3 contain a privilege escalation vulnerability in the getprofile.sh helper script. The s...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now