CWE-306

2,436 vulnerabilities with CWE-306

CVE-2022-41688 CRITICAL

Delta Electronics InfraSuite Device Master <0.0.0.1a - Privilege Es...

CVSS 9.8

CVE-2022-41644 HIGH

Delta Electronics InfraSuite Device Master <0.00.00.01a - Privilege...

CVSS 8.8

CVE-2022-41629 HIGH

Delta Electronics InfraSuite Device Master <00.00.01a - Info Disclo...

CVSS 7.5

CVE-2022-40202 CRITICAL

Delta Electronics InfraSuite Device Master < 00.00.02a - RCE via Database Backup

CVSS 9.8

CVE-2022-2474 CRITICAL

Haas Controller Firmware 100.20.000.1110 - Unauthenticated Arbitrary Macro Write via Ethernet Q Commands

CVSS 9.8

CVE-2022-3674 HIGH

Sanitization Management System 1.0 - Improper Authentication

CVSS 7.3

CVE-2022-38870 HIGH

free5gc v3.2.1 - Information Disclosure

CVSS 7.5

CVE-2022-27623 HIGH

Synology DiskStation Manager < 7.1-42661 - Unauthenticated Arbitrary File Read and Write via iSCSI Management

CVSS 7.4

CVE-2022-1070 HIGH

Aethon TUG Home Base Server < 24 - Unauthenticated Access to Hashed User Credentials

CVSS 8.2

CVE-2022-3327 CRITICAL

GitHub rdiffweb <2.5.0a6 - Info Disclosure

CVSS 9.8

CVE-2022-39426 HIGH

Oracle VM VirtualBox < 6.1.40 - Unauthenticated Remote Code Execution via VRDP

CVSS 8.1

CVE-2022-39425 HIGH

Oracle VM VirtualBox < 6.1.40 - Unauthenticated Remote Code Execution via VRDP

CVSS 8.1

CVE-2022-39412 HIGH

Oracle Access Manager 12.2.1.4.0 - Unauthenticated Missing Authentication for Critical Function

CVSS 7.5

CVE-2022-21587 CRITICAL KEV

Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload

CVSS 9.8

CVE-2022-35136 MEDIUM

Boodskap IoT Platform v4.4.9-02 - Unauthenticated API Request Handling

CVSS 6.5

CVE-2022-20830 MEDIUM

Cisco Catalyst SD-WAN Manager 20.4-20.6.1 and SD-WAN vManage 18.4-20.3.4.1 - Unauthenticated GUI Access via SD-AVC

CVSS 5.3

CVE-2022-38817 HIGH

Dapr Dashboard <0.11.0 - Info Disclosure

CVSS 7.5

CVE-2022-22526 CRITICAL

CPY Car Park Server < 2.8.3 & UWP 3.0 Monitoring Gateway/Controller < 8.5.0.3 - Unauthenticated API Access

CVSS 9.8

CVE-2022-36780 MEDIUM

Avdor CIS crystal_quality - Unauthenticated Access to Recorded Calls via Crafted URL

CVSS 4.9

CVE-2022-35572 HIGH

Linksys E5350 Firmware < 1.0.00.037 - Unauthenticated Information Disclosure via SysInfo.htm

CVSS 7.5

CVE-2022-26394 MEDIUM

Baxter Spectrum WBM - Info Disclosure

CVSS 5.5

CVE-2022-1368 CRITICAL

Cognex 3D-A1000 Dimensioning System Firmware < 1.0.3(3354) - Unauthenticated Password Change via WebSocket Monitoring

CVSS 9.8

CVE-2022-31176 HIGH

grafana-image-renderer < 3.6.1 - Unauthorized File Disclosure via Fake Datasource

CVSS 8.3

CVE-2022-36604 HIGH

Canaan Avalon ASIC Miner <2020.3.30 - Info Disclosure

CVSS 7.5

CVE-2022-36619 HIGH

D-Link DIR-816 A2_v1.10CNB04 - Unauthenticated Network Reset via setMAC Endpoint

CVSS 7.5