Browse CVEs

HIGH 7.5 CVE-2022-48494 Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious a… Emui No fix yet Fix from $1,9502023-06-19 HIGH 7.5 CVE-2022-48496 Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious a… Emui No fix yet Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2023-31411 A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of… Sick Eventcam App Mitigation only Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-27396 FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks… Cs1w Eip21 Firmware Mitigation only Fix from $2,3002023-06-19 CRITICAL 9.8 CVE-2023-30762 Improper authentication vulnerability exists in KB-AHR series and KB-IRIP series. If this vulnerability is exploited, an arbitrary OS command may be … Kb Ahr04d Firmware 91110.1.101106.78 / 91210.1.101106.78+ Fix from $2,3002023-06-13 HIGH 7.5 CVE-2023-31196 Missing authentication for critical function in Wi-Fi AP UNIT allows a remote unauthenticated attacker to obtain sensitive information of the affecte… Ac Pd Wapu Firmware after 1.05_b04p Fix from $1,9502023-06-13 MEDIUM 5.7 CVE-2023-2827 SAP Plant Connectivity - version 15.5 (PCo) or the Production Connector for SAP Digital Manufacturing - version 1.0, do not validate the signature of… Digital Manufacturing Mitigation only Fix from $1,6002023-06-13 CRITICAL 9.1 CVE-2023-34335 AMI BMC contains a vulnerability in the IPMI handler, where an unauthenticated host is allowed to write to a host SPI flash, bypassing secure boot pr… Megarac Spx 12.7 / 13.5+ Fix from $2,3002023-06-12 CRITICAL 9.8 CVE-2023-33553 An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of … Wdrt 1800ax Firmware No fix yet Fix from $2,3002023-06-07 MEDIUM 5.3 CVE-2023-2187 On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send broadcast events to any user via the WebMonitor.… Scada Data Gateway after 5.01.03 Fix from $1,6002023-06-07 CRITICAL 9.8 CVE-2020-36724 The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1. This is due to the use of a user su… Wordable after 3.1.1 Fix from $2,3002023-06-07 CRITICAL 9.8 CVE-2020-36713 The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricted acces… Mstore Api after 2.1.5 Fix from $2,3002023-06-07 CRITICAL 9.8 CVE-2023-2781 The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up… User Email Verification For Woocommerce after 3.5.0 Fix from $2,3002023-06-03 MEDIUM 5.3 CVE-2023-34094 ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models. A vulnerability in versions 20230526 and prior allows unauth… Chuanhuchatgpt after 2023-05-26 Fix from $1,6002023-06-02 MEDIUM 5.7 CVE-2023-25780 It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user… Powerbpm Mitigation only Fix from $1,6002023-06-02 CRITICAL 9.8 CVE-2023-30604 It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310. An unauthoriz… Coda 5310 Firmware Mitigation only Fix from $2,3002023-06-02 MEDIUM 5.4 CVE-2022-36249 Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we… Shop Beat Media Player 3.2.57+ Fix from $1,6002023-05-30 HIGH 7.5 CVE-2022-4240 Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless vers… Onewireless Network Wireless Device Manager Firmware Mitigation only Fix from $1,9502023-05-30 HIGH 7.5 CVE-2023-33247 Talend Data Catalog remote harvesting server before 8.0-20230413 contains a /upgrade endpoint that allows an unauthenticated WAR file to be deployed … Data Catalog 8.0-20230413+ Fix from $1,9502023-05-26 HIGH 7.5 CVE-2023-31227 The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentialit… Emui No fix yet Fix from $1,9502023-05-26 HIGH 7.5 CVE-2023-0116 The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability. Emui Mitigation only Fix from $1,9502023-05-26 HIGH 7.5 CVE-2023-31594 IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network. Icip P2012t Firmware No fix yet Fix from $1,9502023-05-25 HIGH 8.8 CVE-2023-1837 Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR… Hypr Server 8.0+ Fix from $1,9502023-05-23 MEDIUM 5.3 CVE-2023-23545 Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP. data logger products, which may allow a remote unauthentic… Tr 71w Firmware Mitigation only Fix from $1,6002023-05-23 CRITICAL 9.8 CVE-2023-2704 The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5. This is due to insufficient … Bp Social Connect after 1.5 Fix from $2,3002023-05-19 CRITICAL 9.6 CVE-2023-32680 Metabase is an open source business analytics engine. To edit SQL Snippets, Metabase should have required people to be in at least one group with nat… Metabase 0.44.7 / 0.45.4+ Fix from $2,3002023-05-18 HIGH 8.8 CVE-2023-20003 A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenti… Business 140ac Access Point Firmware 10.8.1.0+ Fix from $1,9502023-05-18 CRITICAL 9.8 CVE-2023-1096 SnapCenter versions 4.7 prior to 4.7P2 and 4.8 prior to 4.8P1 are susceptible to a vulnerability which could allow a remote unauthenticated attacker … Snapcenter Mitigation only Fix from $2,3002023-05-12 HIGH 8.2 CVE-2023-23444 Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 10440… Ue410 En4 Firmware Mitigation only Fix from $1,9502023-05-12 HIGH 7.5 CVE-2023-23906 Missing authentication for critical function exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier, which may allow a remote unauthenticate… Skybridge Mb A110 Firmware after 4.2.0 Fix from $1,9502023-05-10