CWE-306

2,436 vulnerabilities with CWE-306

CVE-2022-30317 CRITICAL

Honeywell Experion LX < r520.1 - Unauthenticated DoS via CDA EpicMo Protocol

CVSS 9.1

CVE-2022-37680 HIGH

Hitachi HC-IP9100HD Firmware < 1.07 - Unauthenticated Remote Reboot via /ptipupgrade.cgi

CVSS 7.5

CVE-2022-36521 HIGH

cskefu v7.0.1 - Privilege Escalation

CVSS 7.5

CVE-2022-35733 CRITICAL

UNIMO Technology UDR-JA1004/JA1008/JA1016 <v1.0.20.13 - RCE

CVSS 9.8

CVE-2022-34858 CRITICAL

miniOrange OAuth 2.0 client for SSO < 1.11.3 - Authentication Bypass

CVSS 9.8

CVE-2022-2552 MEDIUM

Duplicator < 1.4.7.1 - Information Disclosure

CVSS 5.3

CVE-2022-37062 HIGH

FLIR AX8 Firmware <= 1.46.16 - Unauthenticated Arbitrary File Read via SQLite Database Path

CVSS 7.5

CVE-2022-35122 CRITICAL

Ecowitt GW1100 Series Firmware <= 2.1.5 - Unauthenticated Sensitive Information Exposure

CVSS 9.1

CVE-2022-2765 MEDIUM

Company Website CMS 1.0 - Improper Authentication in Dashboard Settings

CVSS 6.3

CVE-2022-2242 CRITICAL

KUKA SystemSoftware V/KSS < 8.6.5 - Unauthenticated Robot Configuration Read/Write

CVSS 9.8

CVE-2022-35865 CRITICAL

BMC Track-It! 20.21.2.109 - Unauthenticated Remote Code Execution via HTTP Request Authorization Bypass

CVSS 9.8

CVE-2022-30313 HIGH

Honeywell Experion PKS Safety Manager - Unauthenticated Critical Function Access

CVSS 7.5

CVE-2022-36884 MEDIUM

Jenkins Git Plugin < 4.11.3 - Unauthenticated Information Disclosure via Webhook Endpoint

CVSS 5.3

CVE-2022-36129 CRITICAL

HashiCorp Vault Enterprise <1.9.8, <1.10.5, <1.11.1 - Privilege Esc...

CVSS 9.1

CVE-2022-30276 HIGH

Motorola MOSCAD and ACE IP Gateway Firmware - Unauthenticated Critical Function Access via IPGW Protocol

CVSS 7.5

CVE-2022-29957 HIGH

Emerson DeltaV DCS < 2022-04-29 - Unauthenticated Critical Function Access

CVSS 7.8

CVE-2022-29952 CRITICAL

Bently Nevada 3701/40, 3701/44, 3701/46, and 60m100 Firmware - Unauthenticated Critical Function Access via TDI Protocol

CVSS 9.1

CVE-2022-29951 CRITICAL

JTEKT TOYOPUC PLCs - Unauthenticated Critical Function Access via CMPLink/TCP Protocol

CVSS 9.1

CVE-2022-35871 HIGH

Inductive Automation Ignition 8.1.15 - RCE

CVSS 7.8

CVE-2022-2138 HIGH

Advantech iView <= 5.7.04.6469 - Missing Authentication

CVSS 8.2

CVE-2022-34767 MEDIUM

ALLNET WR0500AC Firmware - Unauthenticated Authorization Bypass via wizardpwd.asp

CVSS 5.9

CVE-2022-20861 CRITICAL

Cisco Nexus Dashboard 1.1-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write

CVSS 9.8

CVE-2022-20858 CRITICAL

Cisco Nexus Dashboard 2.0-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write

CVSS 9.8

CVE-2022-20857 CRITICAL

Cisco Nexus Dashboard 1.0-2.2(1e) - Unauthenticated Remote Code Execution and Arbitrary File Read/Write

CVSS 9.8

CVE-2022-2141 CRITICAL

MiCODUS MV720 GPS tracker - Command Injection

CVSS 9.8