CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

337 matches found

OSV•added 2025/12/10 9:16 p.m.•6 views

CVE-2020-36892

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating ro...

9.8CVSS5.8AI score0.00953EPSS

Exploits1References4

Vulnrichment•added 2025/12/10 8:53 p.m.•3 views

CVE-2020-36894 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability

Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative...

9.3CVSS6.8AI score0.00723EPSS

Exploits1References4

CVE•added 2025/12/10 8:53 p.m.•26 views

CVE-2020-36894

CVE-2020-36894 affects Eibiz i-Media Server Digital Signage 3.8.0. The vulnerability is an authentication bypass in which crafted AMF-encoded objects manipulated at /messagebroker/amf allow unauthenticated attackers to create administrator users, bypassing security controls. Multiple connected so...

9.3CVSS6.8AI score0.00723EPSS

Exploits1References4Affected Software1

Cvelist•added 2025/12/10 8:52 p.m.•23 views

CVE-2020-36892 Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation

9.3CVSS0.00953EPSS

Exploits1References4

CVE•added 2025/12/10 8:52 p.m.•22 views

CVE-2020-36892

Eibiz i-Media Server Digital Signage 3.8.0 is affected by an unauthenticated privilege escalation in the updateUser object. The issue allows attackers to modify user roles by abusing the /messagebroker/amf endpoint without authentication, enabling privilege elevation and potential account takeove...

9.8CVSS6.9AI score0.00953EPSS

Exploits1References4Affected Software1

Positive Technologies•added 2025/12/10 12:0 a.m.•11 views

PT-2025-50515

9.3CVSS7.2AI score0.00723EPSS

Exploits1References6

RedhatCVE•added 2025/12/01 2:16 p.m.•7 views

CVE-2025-66217

AIS-catcher is a multi-platform AIS receiver. Prior to version 0.64, an integer underflow vulnerability exists in the MQTT parsing logic of AIS-catcher. This vulnerability allows an attacker to trigger a massive Heap Buffer Overflow by sending a malformed MQTT packet with a manipulated Topic Leng...

8.8CVSS7.4AI score0.00649EPSS

Exploits1References1