The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
223 vulnerabilities with CWE-425
CVE-2021-42671
HIGH
Sourcecodester Engineers Online Portal - Auth Bypass
CVSS 7.5
CVE-2021-36560
CRITICAL
Phone Shop Sales Managements System <1.0 - Auth Bypass
CVSS 9.8
CVE-2021-36745
CRITICAL
Trend Micro ServerProtect - Auth Bypass
CVSS 9.8
CVE-2021-40875
HIGH
Gurock TestRail <7.2.0.3014 - Info Disclosure
CVSS 7.5
CVE-2021-26085
MEDIUM
KEV
Atlassian Confluence Server <7.4.10, >7.5.0-7.12.2 - Info Disclosure
CVSS 5.3
CVE-2021-20114
HIGH
TCExam <= 14.8.1 - Info Disclosure
CVSS 7.5
CVE-2021-28150
MEDIUM
Hongdian H8922 3.0.5 - Information Disclosure
CVSS 5.5
CVE-2021-24238
MEDIUM
Purethemes Findeo < 1.3.1 - Improper Access Control
CVSS 6.5
CVE-2021-24215
CRITICAL
Wpruby Controlled Admin Access < 1.5.2 - Improper Access Control
CVSS 9.8
CVE-2021-30144
MEDIUM
GLPI Dashboard <1.0.2 - Auth Bypass
CVSS 4.3
CVE-2021-22180
MEDIUM
GitLab <13.4 - Info Disclosure
CVSS 4.3
CVE-2021-3113
HIGH
Netsia SEBA+ <0.16.1 build 70-e669dcd7 - Info Disclosure
CVSS 7.5
CVE-2020-35570
MEDIUM
MymbCONNECT24 <2.11.2 - Info Disclosure
CVSS 5.3
CVE-2020-35391
CRITICAL
Tenda N300 F3 12.01.01.48 - Info Disclosure
CVSS 9.6
CVE-2020-13474
MEDIUM
NCH Express Accounts <8.24 - Privilege Escalation
CVSS 6.5
CVE-2020-7541
MEDIUM
Modicon - Info Disclosure
CVSS 5.3
CVE-2020-29656
HIGH
RT-AC88U Download Master <3.1.0.108 - Info Disclosure
CVSS 7.5
CVE-2020-28937
HIGH
Openclinic - Missing Authentication
CVSS 7.5
CVE-2020-24765
HIGH
InterMind iMind Server <3.13.65 - Info Disclosure
CVSS 7.5
CVE-2020-26150
HIGH
Logaritmo Aware CallManager 2012 - Info Disclosure
CVSS 7.5
CVE-2020-24660
CRITICAL
LemonLDAP::NG <2.0.8 - Auth Bypass
CVSS 9.8
CVE-2020-24203
CRITICAL
Projects World Travel Management System v1.0 - RCE
CVSS 9.8
CVE-2020-13850
HIGH
Artica Pandora FMS 7.44 - Info Disclosure
CVSS 7.5
CVE-2020-11561
HIGH
NCH Express Invoice 7.25 - Privilege Escalation
CVSS 8.8
CVE-2020-10248
HIGH
BWA DiREX-Pro <1.2181 - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
223