The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.
226 vulnerabilities with CWE-425
CVE-2020-13850
HIGH
Artica Pandora FMS 7.44 - Info Disclosure
CVSS 7.5
CVE-2020-11561
HIGH
NCH Express Invoice 7.25 - Privilege Escalation
CVSS 8.8
CVE-2020-10248
HIGH
BWA DiREX-Pro <1.2181 - Info Disclosure
CVSS 7.5
CVE-2020-8439
MEDIUM
Monstra CMS <3.0.4 - Privilege Escalation
CVSS 6.5
CVE-2019-20484
HIGH
Viki Vera <4.9.1.26180 - Info Disclosure
CVSS 8.1
CVE-2019-25012
HIGH
Webform Report <7.x-1.x-dev - Info Disclosure
CVSS 7.5
CVE-2019-12768
CRITICAL
D-Link DAP-1650 <1.04B02_J65H - Auth Bypass
CVSS 9.8
CVE-2019-2388
MEDIUM
MongoDB Ops Manager <4.0.9-4.1.5 - Info Disclosure
CVSS 5.8
CVE-2019-17646
HIGH
Centreon <19.10.2 - Info Disclosure
CVSS 7.5
CVE-2019-17645
HIGH
Centreon <2.8.31, 18.10.9, 19.04.6, 19.10.3 - Info Disclosure
CVSS 7.5
CVE-2019-17644
HIGH
Centreon <2.8-30, 18.10-8, 19.04-5, 19.10-2 - Info Disclosure
CVSS 7.5
CVE-2019-17643
HIGH
Centreon <2.8-30,18.10-8,19.04-5,19.10-2 - Info Disclosure
CVSS 7.5
CVE-2019-16388
MEDIUM
PEGA Platform 8.3.0 - Info Disclosure
CVSS 4.3
CVE-2019-16386
MEDIUM
PEGA Platform 7.x-8.x - Info Disclosure
CVSS 4.3
CVE-2019-16340
CRITICAL
Belkin Linksys Velop <1.1.8.192419 - Info Disclosure
CVSS 9.8
CVE-2019-14927
HIGH
Mitsubishi Electric and INEA ME-RTU Firmware < 2.02 and < 3.0 - Unauthenticated Sensitive Configuration Download
CVSS 7.5
CVE-2019-17503
MEDIUM
Kirona DRS 5.5.3.5 - Info Disclosure
CVSS 5.3
CVE-2019-11326
HIGH
Topcon Positioning Net-G5 GNSS Receiver <5.2.2 - Info Disclosure
CVSS 8.8
CVE-2019-1220
MEDIUM
Internet Explorer - Security Feature Bypass via URL Security Zone Validation
CVSS 4.3
CVE-2019-9584
CRITICAL
eQ-3 Homematic AddOn 'CloudMatic' - Privilege Escalation
CVSS 9.8
CVE-2019-13030
HIGH
eQ-3 Homematic CCU3 - Info Disclosure
CVSS 8.2
CVE-2019-14347
HIGH
Schben Adive < 2.0.7 - Privilege Escalation via User Addition
CVSS 8.8
CVE-2019-9884
CRITICAL
eClass platform < ip.2.5.10.2.1 - Auth Bypass
CVSS 9.8
CVE-2019-13981
MEDIUM
Directus 7 API <2.3.0 - Info Disclosure
CVSS 5.3
CVE-2019-12583
CRITICAL
Zyxel UAG/USG/ZyWall Firmware - Unauthenticated Guest Account Generation via Free Time Component
CVSS 9.1
Details
Vulnerabilities
226