CWE-306

2,439 vulnerabilities with CWE-306

CVE-2020-36873 HIGH

Astak CM-818T3 2.4GHz Wireless Camera - Unauthenticated Config Disclosure via Backup

CVE-2020-36871 HIGH

ESCAM QD-900 WIFI HD - Info Disclosure

CVE-2020-12484 MEDIUM

vivo Wifi < 8.12.0.0 - Missing Authentication for Critical Function

CVSS 6.4

CVE-2020-12492 LOW

Framework Services - Info Disclosure

CVE-2020-12491 MEDIUM

vivo Framework - Missing Authentication for Critical Function

CVE-2020-26942 CRITICAL

Axigen Mail Server <10.3.1.27-10.3.3.1 - Privilege Escalation

CVSS 9.1

CVE-2020-36724 CRITICAL

Wordable plugin <3.1.1 - Auth Bypass

CVSS 9.8

CVE-2020-36713 CRITICAL

MStore API < 2.1.5 - Unauthenticated Authentication Bypass via Unrestricted Register and Update User Profile Routes

CVSS 9.8

CVE-2020-14140 HIGH

Xiaomi Router Firmware 2020-2023.2 - Unauthenticated WIFI Password Exposure via API

CVSS 7.5

CVE-2020-23256 CRITICAL

Electerm 1.3.22 - Unauthenticated Remote Code Execution via Unverified Service Request

CVSS 9.8

CVE-2020-22661 MEDIUM

Ruckus APs and SmartZone Controllers - Unauthorized Backup Image Replacement

CVSS 6.5

CVE-2020-23648 HIGH

Asus RT-N12E 2.0.0.39 - Privilege Escalation

CVSS 7.5

CVE-2020-27376 HIGH

Dr Trust USA iCheck Connect BP Monitor BP Testing <1.2.1 - Missing ...

CVSS 8.8

CVE-2020-14479 MEDIUM

Ignition 7.0.0-7.9.13 - Unauthenticated Sensitive Information Exposure via Serialized Data Handling

CVSS 5.3

CVE-2020-10640 CRITICAL

Emerson OpenEnterprise <3.3.4 - Command Injection

CVSS 10.0

CVE-2020-25566 CRITICAL

SapphireIMS 5.0 - Unauthenticated Account Takeover via Save_Password Form

CVSS 9.8

CVE-2020-25563 CRITICAL

SapphireIMS 5.0 - Unauthenticated Remote Command Execution via RemoteMgmtTaskSave

CVSS 9.8

CVE-2020-36239 CRITICAL

Atlassian Jira Data Center < 8.5.16 - Missing Authorization

CVSS 9.8

CVE-2020-7389 MEDIUM

Sage Syracuse 9.0-9.22.7.2 - Authenticated OS Command Injection via CHAINE Variable

CVSS 5.5

CVE-2020-21936 MEDIUM

Motorola CX2 Firmware - Unauthenticated Information Disclosure via HNAP1/GetMultipleHNAPs

CVSS 5.3

CVE-2020-21934 HIGH

Motorola CX2 Firmware CX 1.0.2 Build 20190508 Rel.97360n - Unauthenticated Syslog Download

CVSS 7.5

CVE-2020-20472 MEDIUM

White Shark System 1.3.2 - Unauthenticated Sensitive Information Disclosure via if_get_addbook.php

CVSS 5.3

CVE-2020-25634 MEDIUM

Red Hat 3scale < 2.10.0 - Unauthenticated Sensitive Information Exposure via API Docs URL

CVSS 5.4

CVE-2020-25697 HIGH

X.org X Server - Missing Authentication for Critical Function

CVSS 7.0

CVE-2020-4670 CRITICAL

IBM Planning Analytics Local 2.0 - Unauthenticated Redis Server Access

CVSS 9.1