CWE-306

2,436 vulnerabilities with CWE-306

CVE-2023-28470 MEDIUM

Couchbase Server <7.1.4 - Info Disclosure

CVSS 5.3

CVE-2023-27060 CRITICAL

LightCMS v1.3.7 - Remote Code Execution via Image Make Function

CVSS 9.8

CVE-2023-25589 CRITICAL

ClearPass Policy Manager 6.9.0-6.9.12 - Unauthenticated Arbitrary User Creation

CVSS 9.8

CVE-2023-27983 MEDIUM

Schneider Electric IGSS < 16.0.0.23040 - Unauthenticated Report Deletion via TCP

CVSS 6.5

CVE-2023-27980 HIGH

Schneider Electric IGSS < 16.0.0.23040 - Unauthenticated RCE via Malicious Report File

CVSS 8.8

CVE-2023-28461 CRITICAL KEV

Array Networks AG and vxAG - Unauthenticated Remote Code Execution

CVSS 9.8

CVE-2023-24526 MEDIUM

SAP NetWeaver Application Server Java - Privilege Escalation

CVSS 5.3

CVE-2023-27532 HIGH KEV

Veeam Backup & Replication < 11.0.1.1261 - Unauthenticated Credential Disclosure

CVSS 7.5

CVE-2023-27290 CRITICAL

IBM Observability with Instana 239-0-239-2, 241-0-241-2, 243-0 - Unauthenticated Data Store Access

CVSS 9.1

CVE-2023-20857 MEDIUM

VMware Workspace ONE Content < 23.02 - Passcode Bypass via Rooted Device Access

CVSS 6.8

CVE-2023-23453 CRITICAL

SICK FX0-GENT v3 Firmware V3.04 and V3.05 - Unauthenticated Remote Code Execution via RK512 Commands

CVSS 9.8

CVE-2023-23452 CRITICAL

SICK FX0-GPNT v3 Firmware V3.04 and V3.05 - Unauthenticated Remote Code Execution via RK512 Commands

CVSS 9.8

CVE-2023-25570 HIGH

Apollo < 2.1.0 - Unauthenticated Access to Eureka Service

CVSS 7.5

CVE-2023-0919 HIGH

Kavita < 0.7.0 - Unauthenticated Access to Critical Function

CVSS 8.1

CVE-2023-0906 HIGH

Online Pizza Ordering System 1.0 - Missing Authentication in POST Parameter Handler

CVSS 7.3

CVE-2023-22804 CRITICAL

LS ELECTRIC XBC-DN32U Firmware 01.80 - Unauthenticated User Creation and Privilege Escalation

CVSS 9.1

CVE-2023-22803 HIGH

LS ELECTRIC XBC-DN32U Firmware 01.80 - Unauthenticated Critical Function Access

CVSS 7.5

CVE-2023-0102 CRITICAL

LS ELECTRIC XBC-DN32U <01.80 - Info Disclosure

CVSS 9.1

CVE-2023-25014 HIGH

femanager < 5.5.3, 6.x < 6.3.4, 7.x < 7.1.0 - Unauthenticated Frontend User Deletion via InvitationController

CVSS 8.6

CVE-2023-25013 HIGH

femanager < 5.5.3, 6.x < 6.3.4, 7.x < 7.1.0 - Unauthenticated Password Reset via InvitationController

CVSS 8.6

CVE-2023-0463 LOW

Devolutions Remote Desktop Manager 2022.3.29-2022.3.30 - Sensitive Data Exposure via MFA Bypass

CVSS 3.3

CVE-2023-0052 CRITICAL

SAUTER Controls Nova 200-220 - Command Injection

CVSS 9.8

CVE-2023-21856 HIGH

Oracle E-Business Suite <12.2.13 - Unauthenticated RCE

CVSS 7.5

CVE-2023-21842 HIGH

Oracle WebLogic Server <14.1.1.0.0 - RCE

CVSS 7.5

CVE-2023-21839 HIGH KEV

Oracle WebLogic Server <14.1.1.0.0 - RCE

CVSS 7.5