CWE-306

2,452 vulnerabilities with CWE-306

CVE-2019-13933 HIGH

Siemens SCALANCE X-200RNA, X204RNA, X-300, XR-300WG, XR-300, X408-2, SIPLUS NET CSM 1277 <4.1.3 - Access Control Bypass

CVSS 8.6

CVE-2019-20143 MEDIUM

GitLab 12.6 - Missing Authentication for Critical Function

CVSS 5.3

CVE-2019-17146 CRITICAL

D-Link DCS-935L <1.12.101 & DCS-960L <1.07.102 - Unauthenticated Stack Overflow via HNAP

CVSS 9.8

CVE-2019-16271 MEDIUM

DTEN D5-D7 <1.3.2 - Info Disclosure

CVSS 5.3

CVE-2019-5080 CRITICAL

WAGO PFC 200/100 <3.01.07-3.00.39 - DoS

CVSS 9.1

CVE-2019-5078 CRITICAL

WAGO PFC200/100 <03.01.07(13), 03.00.39(12) - DoS

CVSS 9.1

CVE-2019-18572 CRITICAL

RSA Identity Governance and Lifecycle <7.1.1 P03 - Auth Bypass

CVSS 9.8

CVE-2019-5077 CRITICAL

WAGO PFC 200 and PFC 100 Firmware - Unauthenticated Denial of Service via I/O-Check Service

CVSS 9.1

CVE-2019-8682 LOW

iPhone OS < 12.4 and watchOS < 5.3 - Unauthenticated In-App Purchase via Lock Screen

CVSS 2.4

CVE-2019-8522 MEDIUM

macOS < 10.14.4 - Unauthenticated Encrypted Volume Remount

CVSS 5.5

CVE-2019-5152 HIGH

Shadowsocks-libev <3.3.2 - Info Disclosure

CVSS 7.4

CVE-2019-16731 HIGH

Petalk AI Firmware 3.2.2.30 - Unauthenticated Firmware Upgrade and Settings Alteration

CVSS 7.5

CVE-2019-18339 CRITICAL

SiNVR/SiVMS Video Server < V5.0.0 - Unauthenticated Authentication Bypass via HTTP Service

CVSS 9.8

CVE-2019-18311 HIGH

SPPA-T3000 MS3000 Migration Server - DoS

CVSS 7.5

CVE-2019-18284 CRITICAL

SPPA-T3000 Application Server < R8.2 SP2 - Unauthenticated Password Hash Exposure and Password Change via AdminService

CVSS 9.8

CVE-2019-15932 CRITICAL

Intesync Solismed 3.3sp - Info Disclosure

CVSS 9.8

CVE-2019-4244 CRITICAL

IBM SmartCloud Analytics Log Analysis 1.3.1-1.3.5 - Unauthenticated Unrestricted Zookeeper Access

CVSS 9.1

CVE-2019-5164 HIGH

shadowsocks-libev 3.3.2 - Unauthenticated Remote Code Execution via Network Packet Handling

CVSS 7.8

CVE-2019-5163 HIGH

shadowsocks-libev 3.3.2 - Denial of Service via UDP Packet Handling

CVSS 7.5

CVE-2019-12503 CRITICAL

Inateck BCST-60 Firmware - Keystroke Injection via Unencrypted Communication

CVSS 9.8

CVE-2019-12392 CRITICAL

Anviz Access Control Devices - Command Injection

CVSS 9.8

CVE-2019-12390 MEDIUM

Anviz Access Control - Info Disclosure

CVSS 5.3

CVE-2019-12389 HIGH

Anviz Access Control - Info Disclosure

CVSS 7.5

CVE-2019-16243 MEDIUM

TCL Alcatel Cingular Flip 2 B9HUAH1 - Info Disclosure

CVSS 6.1

CVE-2019-15511 HIGH

GOG Galaxy < 1.2.60 - Unauthenticated Local Privilege Escalation via TCP Packet Injection

CVSS 7.8