CVE-2020-11919

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0.3.14. There is no CSRF protection.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-11927.8A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. CVE-2020-119209.8An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14. A command injection vulnerability resides in the HOST/IP section oCVE-2020-119218.8An issue was discovered in Lush 2 through 2020-02-25. Due to the lack of Bluetooth traffic encryption, it is possible to hijack an ongoing BCVE-2020-119224.3An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this infCVE-2020-119235.5An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged.CVE-2020-119245.5An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-dCVE-2020-119258.8An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Authentication to the device is based on a username and passwordCVE-2020-119267.5An issue was discovered in Luvion Grand Elite 3 Connect through 2020-02-25. Clients can authenticate themselves to the device using a usernaCVE-2020-119289.8In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_querCVE-2020-11937.8<p>A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. AnCVE-2020-119306.1The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature withiCVE-2020-119313.3An Ubuntu-specific modification to Pulseaudio to provide security mediation for Snap-packaged applications was found to have a bypass of int