CVE-2017-5162
Published Feb 13, 2017An issue was discovered in BINOM3 Universal Multifunctional Electric Power Quality Meter. Lack of authentication for remote service gives access to application set up and configur…
CWE archive
CWE-306 CVEs
Programmatic archive2,789 CVEs tagged with CWE-306 — 1,056 Critical, 1,069 High, 614 Medium, 50 Low, 0 Unrated.
CVE-2016-9369
Published Feb 13, 2017An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…
CVE-2010-5326
Published May 13, 2016The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary co…
- evidence mentions
- 8
- Buzz score
- 56.5
CVE-2016-2004
Published Apr 21, 2016HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified vectors related to lack of authentication…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2014-9197
Published Jan 27, 2015The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote atta…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2014-9195
Published Jan 17, 2015Phoenix Contact ProConOs and MultiProg do not require authentication, which allows remote attackers to execute arbitrary commands via protocol-compliant traffic.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2014-4872
Published Oct 10, 2014BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive cre…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2014-2590
Published Apr 1, 2014The web management interface in Siemens RuggedCom ROS before 3.11, ROS 3.11 before 3.11.5 for RS950G, ROS 3.12, and ROS 4.0 for RSG2488 allows remote attackers to cause a denial o…
CVE-2011-3055
Published Mar 22, 2012The browser native UI in Google Chrome before 17.0.963.83 does not require user confirmation before an unpacked extension installation, which allows user-assisted remote attackers…
CVE-2008-6827
Published Jun 8, 2009The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitr…
CVE-2009-1780
Published May 22, 2009admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileg…
CVE-2007-0956
Published Apr 6, 2007The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username beginning with a '-' character, a simil…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2004-0213
Published Aug 6, 2004Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" s…
CVE-2002-1810
Published Dec 31, 2002D-Link DWL-900AP+ Access Point 2.1 and 2.2 allows remote attackers to access the TFTP server without authentication and read the config.img file, which contains sensitive informat…
Showing 2,776-2,789 of 2,789 CVEsPage 112 of 112