CWE-306

2,451 vulnerabilities with CWE-306

CVE-2020-14479 MEDIUM

Ignition 7.0.0-7.9.13 - Unauthenticated Sensitive Information Exposure via Serialized Data Handling

CVSS 5.3

CVE-2020-10640 CRITICAL

Emerson OpenEnterprise <3.3.4 - Command Injection

CVSS 10.0

CVE-2020-25566 CRITICAL

SapphireIMS 5.0 - Unauthenticated Account Takeover via Save_Password Form

CVSS 9.8

CVE-2020-25563 CRITICAL

SapphireIMS 5.0 - Unauthenticated Remote Command Execution via RemoteMgmtTaskSave

CVSS 9.8

CVE-2020-36239 CRITICAL

Atlassian Jira Data Center < 8.5.16 - Missing Authorization

CVSS 9.8

CVE-2020-7389 MEDIUM

Sage Syracuse 9.0-9.22.7.2 - Authenticated OS Command Injection via CHAINE Variable

CVSS 5.5

CVE-2020-21936 MEDIUM

Motorola CX2 Firmware - Unauthenticated Information Disclosure via HNAP1/GetMultipleHNAPs

CVSS 5.3

CVE-2020-21934 HIGH

Motorola CX2 Firmware CX 1.0.2 Build 20190508 Rel.97360n - Unauthenticated Syslog Download

CVSS 7.5

CVE-2020-20472 MEDIUM

White Shark System 1.3.2 - Unauthenticated Sensitive Information Disclosure via if_get_addbook.php

CVSS 5.3

CVE-2020-25634 MEDIUM

Red Hat 3scale < 2.10.0 - Unauthenticated Sensitive Information Exposure via API Docs URL

CVSS 5.4

CVE-2020-25697 HIGH

X.org X Server - Missing Authentication for Critical Function

CVSS 7.0

CVE-2020-4670 CRITICAL

IBM Planning Analytics Local 2.0 - Unauthenticated Redis Server Access

CVSS 9.1

CVE-2020-36125 HIGH

Pax Technology PAXSTORE < 7.0.8_20200511171508 - Authenticated Incorrect Access Control via Direct Endpoint Request

CVSS 7.1

CVE-2020-36333 CRITICAL

themegrill_demo_importer < 1.6.2 - Unauthenticated Database Wipe via reset_wizard_actions Hook

CVSS 9.1

CVE-2020-35758 CRITICAL

Librewireless Ls9 Firmware - Missing Authentication

CVSS 9.8

CVE-2020-35757 CRITICAL

Librewireless Ls9 Firmware - Missing Authentication

CVSS 9.8

CVE-2020-35756 HIGH

Librewireless Ls9 Firmware - Missing Authentication

CVSS 7.5

CVE-2020-35755 HIGH

Librewireless Ls9 Firmware - Missing Authentication

CVSS 7.5

CVE-2020-21997 HIGH

Smartwares HOME easy <=1.0.9 - Unauthenticated Database Backup Download and Information Disclosure

CVSS 7.5

CVE-2020-21996 HIGH

AVE DOMINAplus <=1.10.x - Unauthenticated Denial of Service via Reboot Command Execution

CVSS 7.5

CVE-2020-17517 HIGH

Apache Ozone <1.1.0 - Info Disclosure

CVSS 7.5

CVE-2020-15078 HIGH

OpenVPN < 2.4.11 - Authentication Bypass via Deferred Authentication

CVSS 7.5

CVE-2020-25218 CRITICAL

Grandstream GRP261x Firmware 1.0.3.6 - Unauthenticated Authentication Bypass in Administrative Web Interface

CVSS 9.8

CVE-2020-28899 CRITICAL

ZyXEL LTE4506-M606 Firmware < v1.00(ABDO.6)C0 - Unauthenticated Remote Command Execution via CGI Script

CVSS 9.1

CVE-2020-35226 HIGH

NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 - Unauthenticated DHCP Configuration Modification

CVSS 7.1