howfor records
4 published records for vendor howfor.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-522 Insufficiently Protected Credentials1
- CWE-530 Exposure of Backup File to an Unauthorized Control Sphere1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2020-36897No exploit | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Executionhowfor · qihang media web digital signage · CWE-434 | Critical9.3 | — | 1.3% | Dec 10, 2025 |
36Monitor | CVE-2020-36898No exploit | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletionhowfor · qihang media web digital signage · CWE-22 | High8.8 | — | 1.7% | Dec 10, 2025 |
34Monitor | CVE-2020-36899No exploit | QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosurehowfor · qihang media web digital signage · CWE-530 | High8.7 | — | 0.9% | Dec 10, 2025 |
34Monitor | CVE-2020-36896No exploit | QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosurehowfor · qihang media web digital signage · CWE-522 | High8.7 | — | 0.9% | Dec 10, 2025 |
- CVE-2020-3689737Monitor
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Remote Code Execution
CriticalCVSS 9.3No exploitEPSS 1%howfor · qihang media web digital signageDec 10, 2025
- CVE-2020-3689836Monitor
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion
HighCVSS 8.8No exploitEPSS 2%howfor · qihang media web digital signageDec 10, 2025
- CVE-2020-3689934Monitor
QiHang Media Web Digital Signage 3.0.9 Unauthenticated Arbitrary File Disclosure
HighCVSS 8.7No exploitEPSS 1%howfor · qihang media web digital signageDec 10, 2025
- CVE-2020-3689634Monitor
QiHang Media Web Digital Signage 3.0.9 Cleartext Credentials Disclosure
HighCVSS 8.7No exploitEPSS 1%howfor · qihang media web digital signageDec 10, 2025