The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
223 vulnerabilities with CWE-425
CVE-2023-28160
MEDIUM
Firefox < 111 - Info Disclosure
CVSS 6.5
CVE-2023-2524
MEDIUM
Control iD RHiD 23.3.19.0 - Open Redirect
CVSS 6.3
CVE-2023-1699
MEDIUM
Rapid7 Nexpose <6.6.187 - Forced Browsing
CVSS 4.3
CVE-2023-1663
MEDIUM
Coverity <2023.3.2 - Info Disclosure
CVSS 6.5
CVE-2023-1682
MEDIUM
Xunrui CMS 4.61 - SSRF
CVSS 4.3
CVE-2022-43110
CRITICAL
Voltronic Power ViewPower <1.04-21353 & PowerShield Netguard <1.04-...
CVSS 9.8
CVE-2022-42438
HIGH
IBM Cloud Pak for Multicloud Management Monitoring <2.4 - Info Disc...
CVSS 7.5
CVE-2022-47700
HIGH
COMFAST CF-WR623N <V2.3.0.1 - Auth Bypass
CVSS 7.5
CVE-2022-4057
MEDIUM
Autoptimize <3.1.0 - Info Disclosure
CVSS 5.3
CVE-2022-42953
HIGH
ZKTeco <8.88 - Info Disclosure
CVSS 7.5
CVE-2022-25626
MEDIUM
Identity Manager - Info Disclosure
CVSS 5.3
CVE-2022-45276
CRITICAL
YJCMS 1.0.9 - Info Disclosure
CVSS 9.8
CVE-2022-40845
MEDIUM
Tenda AC1200 Router W15Ev2 V15.11.0.10(1576) - Info Disclosure
CVSS 6.5
CVE-2022-42197
MEDIUM
Simple Exam Reviewer Management System <1.0 - Privilege Escalation
CVSS 6.5
CVE-2022-42238
HIGH
Merchandise Online Store - Privilege Escalation
CVSS 8.8
CVE-2022-41746
CRITICAL
Trend Micro Apex One - Privilege Escalation
CVSS 9.1
CVE-2022-36158
HIGH
Contec FXA3200 <1.13.00 - Command Injection
CVSS 8.0
CVE-2022-2551
HIGH
Duplicator <1.4.7 - Info Disclosure
CVSS 7.5
CVE-2022-2544
HIGH
Ninja Job Board <1.3.3 - Path Traversal
CVSS 7.5
CVE-2022-34574
MEDIUM
Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 - Info Disclo...
CVSS 5.7
CVE-2022-34573
MEDIUM
Wavlink WiFi-Repeater - Info Disclosure
CVSS 6.3
CVE-2022-34572
MEDIUM
Wavlink WiFi-Repeater - Info Disclosure
CVSS 5.7
CVE-2022-34571
HIGH
Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 - Code Injection
CVSS 8.0
CVE-2022-34570
HIGH
Wavlink Wl-wn579x3 Firmware - Information Disclosure
CVSS 7.5
CVE-2022-1551
MEDIUM
SP Project & Document Manager <4.58 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities
223