When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
4,371 vulnerabilities with CWE-287
CVE-2020-8713
HIGH
Intel(R) Server <1.59 - Privilege Escalation
CVSS 8.8
CVE-2020-8709
HIGH
Intel(R) Server <2.45 - Privilege Escalation
CVSS 8.8
CVE-2020-8708
HIGH
Intel(R) Server <1.59 - Privilege Escalation
CVSS 8.8
CVE-2020-13290
HIGH
GitLab <13.0.12-13.2.3 - Info Disclosure
CVSS 7.5
CVE-2020-13292
CRITICAL
GitLab <13.0.12-13.2.3 - Auth Bypass
CVSS 9.6
CVE-2020-15063
HIGH
DIGITUS DA-70254 2.073.000.E0008 - Unauthenticated Authentication Bypass via Missing Password Parameter
CVSS 8.8
CVE-2020-15059
HIGH
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 - Authentication Bypass via Missing Password
CVSS 8.8
CVE-2020-15055
HIGH
TP-Link USB Network Server TL-PS310U <2.079.000.t0210 - Auth Bypass
CVSS 8.8
CVE-2020-16169
CRITICAL
temi Robox OS < 119.24 - Authentication Bypass via Alternate Path
CVSS 9.8
CVE-2020-15136
MEDIUM
ectd <3.4.10, <3.3.23 - Info Disclosure
CVSS 6.5
CVE-2020-13365
HIGH
Zyxel Products - Privilege Escalation
CVSS 8.8
CVE-2020-5608
CRITICAL
CAMS for HIS CENTUM CS 3000 - Auth Bypass
CVSS 9.8
CVE-2020-5616
CRITICAL
[Calendar01]-[Calendar02],[PKOBO-News01]-[PKOBO-vote01],[Telop01]-[...
CVSS 9.8
CVE-2020-8108
HIGH
Bitdefender Endpoint Security for Mac <4.12.80 - Privilege Escalation
CVSS 8.2
CVE-2020-5384
HIGH
RSA MFA Agent 2.0 - Unauthenticated Authentication Bypass via Alternate Path
CVSS 8.4
CVE-2020-14158
CRITICAL
ABUS Secvest Hybrid FUMO50110 Firmware - Authentication Bypass via RF Packet Manipulation
CVSS 9.1
CVE-2020-8206
HIGH
Pulse Connect Secure <9.1RB - Auth Bypass
CVSS 8.1
CVE-2020-16088
CRITICAL
OpenBSD < 6.7 - Authentication Bypass in OpenIKED Public Key Check
CVSS 9.8
CVE-2020-9077
LOW
HUAWEI P30 Firmware < 10.1.0.160(C00E160R2P11) - Information Exposure via Improper Interface Authentication
CVSS 3.3
CVE-2020-12812
CRITICAL
KEV
FortiOS 6.4.0, 6.2.0-6.2.3, <6.0.10 - Improper Authentication via Username Case Variation
CVSS 9.8
CVE-2020-8207
HIGH
Citrix Workspace app <2006.1 - Privilege Escalation
CVSS 8.8
CVE-2020-15921
CRITICAL
Mida eFramework < 2.9.0 - Unauthenticated Backdoor Access and Code Execution
CVSS 9.8
CVE-2020-12638
MEDIUM
Espressif ESP-IDF <4.2 - Auth Bypass
CVSS 6.8
CVE-2020-10918
HIGH
C-MORE HMI EA9 Firmware <6.52 - Auth Bypass
CVSS 7.5
CVE-2020-15896
HIGH
D-Link DAP-1522 Firmware < 1.10b04Beta02 - Unauthenticated Authentication Bypass via NO_NEED_AUTH Parameter
CVSS 7.5
Details
Vulnerabilities
4,371
Exploit Likelihood
High