When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
4,372 vulnerabilities with CWE-287
CVE-2020-9070
MEDIUM
Huawei Taurus-AL00B Firmware < 10.0.0.205(C00E201R7P2) - Improper Authentication
CVSS 5.5
CVE-2020-1803
MEDIUM
Huawei Honor V20 <10.0.0.179-180 - Info Disclosure
CVSS 5.3
CVE-2020-7276
MEDIUM
McAfee Endpoint Security for Windows - Authentication Bypass via MfeUpgradeTool
CVSS 6.4
CVE-2020-8148
MEDIUM
UniFi Cloud Key <1.1.6 - Info Disclosure
CVSS 5.3
CVE-2020-1801
MEDIUM
Huawei Mate 30 and Mate 30 Pro Firmware < 10.0.0.205 - Improper Authentication
CVSS 5.5
CVE-2020-8828
HIGH
Argocd-server <1.5.0 - Privilege Escalation
CVSS 8.8
CVE-2020-1637
HIGH
Juniper Junos OS on SRX Series Improper Authentication via IP Address Range Configuration
CVSS 7.2
CVE-2020-1618
MEDIUM
Juniper Junos OS Authentication Bypass via Console Port
CVSS 6.3
CVE-2020-11542
CRITICAL
3xLOGIC Infinias eIDC32 2.213 with Web 1.107 - Authentication Bypass via CMD.HTM Endpoint
CVSS 9.8
CVE-2020-5860
HIGH
F5 BIG-IP and BIG-IQ - Cleartext Transmission of Sensitive Information in HA Network Failover Traffic
CVSS 8.1
CVE-2020-9066
HIGH
Huawei OxfordP-AN10B Firmware < 10.0.1.169(C00E166R4P1) - Improper Authentication via Malicious Plug-in Installation
CVSS 7.8
CVE-2020-10965
HIGH
Teradici PCoIP Management Console <20.01.0, 19.11.1 - Auth Bypass
CVSS 8.1
CVE-2020-10888
CRITICAL
TP-Link Archer A7 Firmware <190726 - Auth Bypass
CVSS 9.8
CVE-2020-10847
MEDIUM
Samsung Galaxy S8/Note8 - Info Disclosure
CVSS 6.8
CVE-2020-10846
MEDIUM
Samsung mobile <P(9.x),Q(10.x) - Info Disclosure
CVSS 5.5
CVE-2020-8863
HIGH
D-Link DIR-867,DIR-878,DIR-882 <1.10B04 - Auth Bypass
CVSS 8.8
CVE-2020-1878
MEDIUM
Huawei smartphone OxfordS-AN00A <10.0.1.152D(C735E152R3P3),<10.0.1....
CVSS 5.5
CVE-2020-1864
HIGH
Huawei Secospace AntiDDoS8000 - Auth Bypass
CVSS 8.1
CVE-2020-1794
MEDIUM
HUAWEI Mate 20 <10.0.0.188 - Info Disclosure
CVSS 4.6
CVE-2020-1793
MEDIUM
HUAWEI Mate 20 <10.0.0.188 - Info Disclosure
CVSS 4.6
CVE-2020-10669
HIGH
Canon Oce Colorwave 500 4.0.0.0 - Auth Bypass
CVSS 7.5
CVE-2020-4205
MEDIUM
IBM DataPower Gateway 2018.4.1.0-2018.4.1.8 - Authenticated Security Restriction Bypass via Revoked Certificate
CVSS 6.3
CVE-2020-6988
HIGH
Rockwell Automation MicroLogix 1400 A/B <21.001 and 1100, RSLogix 500 <12.001 - Credential Disclosure
CVSS 7.5
CVE-2020-10594
CRITICAL
drf-jwt <1.15.1 - Auth Bypass
CVSS 9.1
CVE-2020-9064
MEDIUM
Huawei Honor V30 Firmware < OxfordS-AN00A 10.0.1.167(C00E166R4P1) - Improper Authentication
CVSS 5.5
Details
Vulnerabilities
4,372
Exploit Likelihood
High