When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
4,372 vulnerabilities with CWE-287
CVE-2018-6011
HIGH
RainMachine Mini-8 (2nd gen) - Info Disclosure
CVSS 8.1
CVE-2018-18891
HIGH
MiniCMS 1.10 - Unauthenticated File Deletion via /mc-admin/post.php
CVSS 7.5
CVE-2018-16467
MEDIUM
Nextcloud Server < 14.0.0 - Unauthenticated Access to Password-Protected Share Previews
CVSS 5.3
CVE-2018-16465
MEDIUM
Nextcloud Server < 14.0.0 - Improper Authentication via Second Factor Provider Failure
CVSS 5.3
CVE-2018-16464
MEDIUM
Nextcloud Server < 14.0.0 - Unauthenticated Continued Access to Password-Protected Link Shares
CVSS 5.7
CVE-2018-17923
MEDIUM
sagaradio saga1-l8b_firmware < a0.10 - Improper Authentication
CVSS 6.9
CVE-2018-15751
CRITICAL
SaltStack Salt < 2017.7.8 and 2018.3.x < 2018.3.3 - Unauthenticated Remote Code Execution via salt-api
CVSS 9.8
CVE-2018-18014
MEDIUM
Citrix XenMobile Server < 10.8.0 - Unauthenticated Remote Code Execution via Private Service Ports
CVSS 4.8
CVE-2018-12667
CRITICAL
SV3C H.264 POE IP Camera Firmware - Unauthenticated Improper Authentication
CVSS 9.8
CVE-2018-12666
CRITICAL
SV3C L-SERIES HD CAMERA V2.3.4.2103-S50-NTD-B20170508B - Auth Bypass
CVSS 9.8
CVE-2018-1822
CRITICAL
IBM FlashSystem 900 and 840 Firmware - Unauthenticated Authentication Bypass
CVSS 9.8
CVE-2018-7989
MEDIUM
Huawei Mate 10 pro <BLA-AL00B 8.1.0.326(C00) - Auth Bypass
CVSS 4.6
CVE-2018-7076
CRITICAL
HPE Intelligent Management Center < 7.3 - Remote Code Execution
CVSS 9.8
CVE-2018-10933
CRITICAL
libssh Authentication Bypass Scanner
CVSS 9.1
CVE-2018-18389
CRITICAL
Neo4j Enterprise Database Server 3.4.0-3.4.8 - Improper Authentication via LDAP STARTTLS Bypass
CVSS 9.8
CVE-2018-17534
MEDIUM
Teltonika RUT9XX <00.04.233 - Privilege Escalation
CVSS 6.8
CVE-2018-1738
HIGH
IBM Security Key Lifecycle Manager 2.6-2.6.0.3, 2.7, 3.0 - Authenticated Improper Authentication
CVSS 7.1
CVE-2018-18061
HIGH
tecrail Responsive FileManager 9.8.1 - Unauthenticated File Upload and Deletion via dialog.php
CVSS 7.5
CVE-2018-16738
LOW
tinc 1.0.30-1.0.34 - Improper Authentication
CVSS 3.7
CVE-2018-16737
MEDIUM
tinc < 1.0.30 - Improper Authentication
CVSS 5.3
CVE-2018-13789
HIGH
Descor Infocad FM <3.1.0.0 - Info Disclosure
CVSS 7.5
CVE-2018-12455
HIGH
Intelbras NPLUG 1.0.0.14 - Auth Bypass
CVSS 8.1
CVE-2018-0053
MEDIUM
Juniper Junos OS < 15.1X49-D30 on vSRX - Unauthenticated Authentication Bypass
CVSS 6.8
CVE-2018-0052
HIGH
Junos OS Multiple Versions - Unauthenticated Remote Root Access
CVSS 7.2
CVE-2018-0044
CRITICAL
Juniper Junos 18.1r1-18.1r3 - Unauthenticated Remote Access via Empty Password SSHD Configuration
CVSS 9.8
Details
Vulnerabilities
4,372
Exploit Likelihood
High