CWE-306

2,430 vulnerabilities with CWE-306

CVE-2024-35151 MEDIUM

IBM OpenPages with Watson 8.3 and 9.0 - Authenticated Sensitive Information Exposure via API Authorization Bypass

CVSS 6.5

CVE-2024-43272 MEDIUM

Icegram < 3.1.24 - Unauthenticated Access to Unpublished Campaigns

CVSS 5.3

CVE-2024-42462 CRITICAL

upKeeper Manager <5.1.9 - Auth Bypass

CVSS 9.8

CVE-2024-6347 MEDIUM

Nissan Altima 2022 Blind Spot Detection Sensor ECU Firmware - Unauthenticated Denial of Service via UDS Session

CVSS 6.5

CVE-2024-7628 HIGH

MStore API < 4.15.2 - Unauthenticated Authentication Bypass via Loose Comparison in verify_id_token

CVSS 8.1

CVE-2024-38143 MEDIUM

Windows WLAN AutoConfig Service - Privilege Escalation

CVSS 4.2

CVE-2024-35124 HIGH

IBM OpenBMC fw1020.00-fw1020.60 - Unauthenticated Administrative Access via Default Password

CVSS 7.5

CVE-2024-7503 CRITICAL

WooCommerce - Social Login <= 2.7.5 - Unauthenticated Authentication Bypass via Loose Activation Code Comparison

CVSS 9.8

CVE-2024-3279 CRITICAL

AnythingLLM < 1.0.0 - Unauthenticated Database Manipulation via Import Endpoint

CVSS 9.1

CVE-2024-32765 MEDIUM

QTS 5.1.0-5.1.8.2823 and QuTS hero h5.1.0-h5.1.8.2823 - Authenticated Privilege Escalation via Network & Virtual Switch

CVSS 4.2

CVE-2024-35143 MEDIUM

IBM Planning Analytics Local 2.0-2.1 - Unauthenticated Database Access via MongoDB

CVSS 6.7

CVE-2024-3219 MEDIUM

CPython <3.8.20, 3.9.0-3.9.19, 3.10.0-3.10.14, 3.11.0-3.11.9, 3.12.0-3.12.4, 3.13.0a1-3.13.0rc0 - Socket Connection Race

CVE-2024-7154 MEDIUM

TOTOLINK A3700R 9.1.2u.5822_B20200513 - Improper Access Control in Password Reset Handler

CVSS 4.3

CVE-2024-7007 CRITICAL

Positron TRA7005 Firmware v1.20 - Unauthenticated Authentication Bypass

CVSS 9.8

CVE-2024-7079 MEDIUM

Openshift Container Platform - Unauthenticated Helm Chart Verification Endpoint Access

CVSS 6.5

CVE-2024-39601 MEDIUM

CPCI85 Central Processing/Communication <5.40 - Privilege Escalation

CVSS 6.5

CVE-2024-38437 CRITICAL

D-Link DSL-225 Firmware - Authentication Bypass via Alternate Path

CVSS 9.8

CVE-2024-6635 HIGH

WooCommerce - Social Login <2.7.3 - Auth Bypass

CVSS 7.3

CVE-2024-6895 MEDIUM

Yugabyte Platform - Privilege Escalation

CVE-2024-21183 HIGH

Oracle WebLogic Server 12.2.1.4.0/14.1.1.0.0 - Unauthenticated Critical Function Access via T3/IIOP

CVSS 7.5

CVE-2024-21146 HIGH

Oracle Trade Management 12.2.3-12.2.13 - Authenticated Unauthorized Data Access and Modification via GL Accounts

CVSS 8.1

CVE-2024-36457 MEDIUM

Symantec Privileged Access Management 3.4.6-4.1.7 - Unauthenticated Authentication Bypass

CVE-2024-5910 CRITICAL KEV

Palo Alto Expedition Remote Code Execution (CVE-2024-5910 and CVE-2024-9464)

CVSS 9.8

CVE-2024-6422 CRITICAL

Pepperl-fuchs OIT Series Firmware <= 2.11.0 - Unauthenticated Remote Manipulation via Telnet

CVSS 9.8

CVE-2024-37767 HIGH

14Finger 1.1 - Unauthenticated Information Disclosure via Admin User API

CVSS 7.5