CWE-306

2,439 vulnerabilities with CWE-306

CVE-2021-39233 CRITICAL

Apache Ozone < 1.2.0 - Unauthenticated Container Request Access

CVSS 9.1

CVE-2021-41266 HIGH

Minio Console < 0.12.3 - Authentication Bypass via External IDP Misconfiguration

CVSS 8.6

CVE-2021-20136 CRITICAL

ManageEngine Log360 < 5235 - Unauthenticated Database Configuration Overwrite and Remote Code Execution

CVSS 9.8

CVE-2021-33259 MEDIUM

D-Link DIR-868LW 1.12b - Info Disclosure

CVSS 5.3

CVE-2021-41157 MEDIUM

FreeSWITCH < 1.10.6 - Unauthenticated SIP SUBSCRIBE Event Notification Access

CVSS 5.3

CVE-2021-37624 HIGH

FreeSWITCH < 1.10.7 - Unauthenticated SIP MESSAGE Spoofing and Spam

CVSS 7.5

CVE-2021-42539 HIGH

Emerson Wireless 1410/1410D/1420 Gateway Firmware < 4.7.94 - Unauthenticated Account Takeover via Backup Restore

CVSS 8.0

CVE-2021-38457 CRITICAL

versiondog < 8.0.0 - Unauthenticated Improper Access Control

CVSS 9.8

CVE-2021-27395 HIGH

SIMATIC Process Historian <2013-2020 - Info Disclosure

CVSS 8.1

CVE-2021-41976 MEDIUM

tad_uploader < 3.5.4 - Unauthenticated Authorization Bypass in Edit Book List Function

CVSS 5.3

CVE-2021-41975 HIGH

TadTools < 3.2.2 - Unauthenticated Arbitrary File Deletion via Special Page Parameter

CVSS 7.5

CVE-2021-41974 CRITICAL

Tad Book3 < 3.9 - Unauthenticated Arbitrary Book Content Modification

CVSS 9.1

CVE-2021-41568 MEDIUM

Tad Web < 1.76 - Unauthenticated Authorization Bypass

CVSS 5.3

CVE-2021-35979 HIGH

Digi RealPort <4.8.488.0 - Info Disclosure

CVSS 8.1

CVE-2021-23858 HIGH

Bosch Rexroth IndraMotion MLC and IndraControl XLC Firmware < 12 - Unauthenticated Information Disclosure via Web Server

CVSS 8.6

CVE-2021-39879 LOW

GitLab 7.11.0-14.1.7 - Missing Authentication for Two-Factor Disabling

CVSS 2.2

CVE-2021-3825 CRITICAL

LiderAhenk <2.1.15 - Info Disclosure

CVSS 9.6

CVE-2021-41104 HIGH

ESPHome < 2021.9.2 - Unauthenticated Over-the-Air Update via Web Server

CVSS 7.5

CVE-2021-22012 HIGH

VMware Cloud Foundation 3.0-5.0 and vCenter Server - Unauthenticated Information Disclosure via Appliance Management API

CVSS 7.5

CVE-2021-37420 MEDIUM

ManageEngine ADSelfService Plus < 6112 - Unauthenticated Mail Spoofing

CVSS 6.5

CVE-2021-38412 CRITICAL

Digi PortServer TS 16 Rack - Info Disclosure

CVSS 9.6

CVE-2021-33543 CRITICAL

Multiple Camera Devices - Info Disclosure

CVSS 9.8

CVE-2021-28913 CRITICAL

BAB TECHNOLOGIE eibPort V3 < 3.9.1 - Unauthenticated SSH Root Access via Hardcoded Passphrase Exposure

CVSS 9.8

CVE-2021-38540 CRITICAL

Airflow >=2.0.0-<2.1.3 - RCE/Info Disclosure

CVSS 9.8

CVE-2021-32800 HIGH

Nextcloud <20.0.12-22.1.0 - Auth Bypass

CVSS 8.1