CWE-306

2,436 vulnerabilities with CWE-306

CVE-2023-40585 HIGH

Ironic-image <capm3-v1.4.3 - Info Disclosure

CVSS 7.3

CVE-2023-38422 HIGH

Walchem Intuition <4.21 - Info Disclosure

CVSS 7.5

CVE-2023-36847 MEDIUM KEV

Juniper Networks Junos OS - Path Traversal

CVSS 5.3

CVE-2023-36846 MEDIUM KEV

Juniper Junos OS on SRX Series < 22.4R3 - Unauthenticated Arbitrary File Upload via J-Web

CVSS 5.3

CVE-2023-4335 HIGH

Broadcom RAID Controller Web - Info Disclosure

CVSS 7.5

CVE-2023-4334 HIGH

Broadcom RAID Controller Web server - Info Disclosure

CVSS 7.5

CVE-2023-39380 HIGH

Huawei EMUI and HarmonyOS - Improper Authentication in Audio Module

CVSS 7.5

CVE-2023-38186 HIGH

Windows Mobile Device Management - Privilege Escalation

CVSS 8.8

CVE-2023-37373 MEDIUM

RUGGEDCOM CROSSBOW < 5.4 - Unauthenticated Arbitrary File Write

CVSS 5.3

CVE-2023-39436 MEDIUM

SAP Supplier Relationship Management 600-606, 616-617 - Unauthenticated Information Disclosure

CVSS 5.8

CVE-2023-37483 CRITICAL

SAP PowerDesigner 16.7 - Unauthenticated Arbitrary Database Query Execution via Proxy

CVSS 9.8

CVE-2023-36926 LOW

SAP Host Agent <7.22 - Info Disclosure

CVSS 3.7

CVE-2023-38523 MEDIUM

Samsung Harman AMX N-Series - Info Disclosure

CVSS 5.3

CVE-2023-22047 HIGH

Oracle PeopleSoft Enterprise PeopleTools 8.59/8.60 - Unauthenticated Critical Function Access

CVSS 7.5

CVE-2023-36669 CRITICAL

Kratos NGC Indoor Unit Firmware < 11.4 - Unauthenticated Remote Control via TPU Impersonation

CVSS 9.8

CVE-2023-34329 CRITICAL

AMI MegaRAC SP-X - Authentication Bypass via HTTP Header Spoofing

CVSS 9.1

CVE-2023-37265 CRITICAL

CasaOS < 0.4.4 - Unauthenticated Remote Code Execution via IP Address Verification Bypass

CVSS 9.8

CVE-2023-38379 HIGH

RIGOL MSO5000 <00.01.03.00.03 - Auth Bypass

CVSS 7.5

CVE-2023-35874 MEDIUM

SAP NetWeaver Application Server ABAP and ABAP Platform - Missing Authentication for Critical Function

CVSS 6.0

CVE-2023-35873 MEDIUM

SAP NetWeaver Process Integration SAP_XITOOL 7.50 - Unauthenticated Missing Authentication for Critical Function

CVSS 6.5

CVE-2023-35872 MEDIUM

SAP NetWeaver Process Integration SAP_XIAF 7.50 - Unauthenticated Missing Authentication for Critical Function

CVSS 6.5

CVE-2023-30643 HIGH

Samsung Android Galaxy Themes Service - Unauthenticated Arbitrary Application Deletion

CVSS 7.7

CVE-2023-22906 HIGH

Hero Qubo HCD01 and HCD02 Firmware - Unauthenticated Root Access via TELNET

CVSS 8.8

CVE-2023-36347 HIGH

POS Codekop 2.0 - Unauthenticated Sensitive Data Exposure via excel.php Endpoint

CVSS 7.5

CVE-2023-2834 CRITICAL

BookIt WordPress <2.3.7 - Auth Bypass

CVSS 9.8