CWE-306

2,451 vulnerabilities with CWE-306

CVE-2020-19419 HIGH

Emerson Smart Wireless Gateway 1420 Firmware 4.6.59 - Unauthenticated Sensitive Information Exposure

CVSS 7.5

CVE-2020-27225 HIGH

Eclipse Platform <4.18 - Info Disclosure

CVSS 7.8

CVE-2020-36245 HIGH

GramAddict < 1.2.3 - Unauthenticated Remote Code Execution via UIAutomator2 and ATX-Agent

CVSS 8.8

CVE-2020-26192 HIGH

Dell EMC PowerScale OneFS 8.2.0-9.1.0 - Privilege Escalation via ISI_PRIV_LOGIN_CONSOLE or ISI_PRIV_LOGIN_SSH

CVSS 7.8

CVE-2020-15798 CRITICAL

SIMATIC HMI Comfort Panels and KTP Mobile Panels < V16 Update 3a - Unauthenticated Remote Access via Telnet

CVSS 9.8

CVE-2020-10537 HIGH

epikur < 20.1.1 - Unauthenticated Administrator Access via Glassfish Default Configuration

CVSS 7.8

CVE-2020-14245 CRITICAL

HCL OneTest UI 9.5, 10.0, 10.1 - Missing Authentication for Critical Function

CVSS 9.8

CVE-2020-29165 CRITICAL

PacsOne Server < 7.1.1 - Unauthenticated Privilege Escalation to Administrator

CVSS 9.8

CVE-2020-15834 HIGH

Mofi Network MOFI4500-4GXeLTE 4.1.5-std - Unauthenticated Wireless Password Exposure via QR Code Download

CVSS 7.5

CVE-2020-13856 HIGH

MOFI4500-4GXeLTE Firmware 4.0.8-std - Unauthenticated Sensitive Information Exposure via Support File Download

CVSS 7.5

CVE-2020-23448 CRITICAL

newbee-mall - Unauthenticated Privilege Escalation via AdminLoginInterceptor Bypass

CVSS 9.8

CVE-2020-4958 CRITICAL

IBM Security Identity Governance and Intelligence 5.2.6 - Missing Authentication for Critical Function

CVSS 9.8

CVE-2020-9143 MEDIUM

Huawei EMUI and Magic UI - Missing Authentication for Critical Function

CVSS 5.3

CVE-2020-15799 MEDIUM

SCALANCE X-200 and X-200IRT Switch Families < V5.5.0 - Unauthenticated Denial of Service via Web Server URL

CVSS 6.5

CVE-2020-5022 MEDIUM

IBM Spectrum Protect Plus 10.1.0-10.1.6 - Unauthenticated Information Disclosure via VDAP Proxy

CVSS 5.3

CVE-2020-27285 CRITICAL

Crimson <3.1-3119.001 - Info Disclosure

CVSS 9.1

CVE-2020-35951 CRITICAL

Quiz and Survey Master < 7.0.1 - Unauthenticated Arbitrary File Deletion via qsm_remove_file_fd_question

CVSS 9.9

CVE-2020-10148 CRITICAL KEV

SolarWinds Orion Platform 2019.4 HF 5, 2020.2, 2020.2 HF 1 - Unauthenticated API Authentication Bypass

CVSS 9.8

CVE-2020-9208 MEDIUM

iManager NetEco 6000 V600R021C00 - Unauthenticated Information Disclosure

CVSS 6.5

CVE-2020-29551 CRITICAL

URVE Build 24.03.2020 - Unauthenticated System Shutdown via _internal/pc/shutdown.php

CVSS 9.1

CVE-2020-24580 HIGH

D-Link DSL-2888A <AU_2.31_V1.1.47ae55 - Info Disclosure

CVSS 7.5

CVE-2020-26173 LOW

Tangro Business Workflow < 1.18.1 - Unauthenticated Document Download via Valid Document ID and Token

CVSS 3.1

CVE-2020-35197 CRITICAL

Memcached Docker <1.5.11-alpine - Privilege Escalation

CVSS 9.8

CVE-2020-35196 CRITICAL

RabbitMQ Docker Image < 3.7.13-beta.1-management-alpine - Blank Root Password

CVSS 9.8

CVE-2020-35195 CRITICAL

Haproxy Docker <1.8.18-alpine - Privilege Escalation

CVSS 9.8