CWE-306

In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and

In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and

In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285,

In ONAP DCAE through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, an

In ONAP OOM through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and

An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote attackers to execute arbitr

WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Servi

An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipul

The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentica

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the re

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface,

An issue was discovered on D-Link DSL-2640B B2 EU_4.01B devices. A cfm UDP service listening on port 65002 allows remote

Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0

ABB MicroSCADA Pro SYS600 version 9.3 suffers from an instance of CWE-306: Missing Authentication for Critical Function.

vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has incorrect access control.

SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an att

An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without autho

CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire database server

GE Grid Solutions Reason RT Clocks, RT430, RT431, and RT434, all firmware versions prior to 08A05. The device’s vulnerab

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon succ

Standalone clients connecting to SAP NetWeaver AS Java via P4 Protocol, versions (SAP-JEECOR 7.00, 7.01; SERVERCOR 7.10,

If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (s

MiR100, MiR200 and other MiR robots use the Robot Operating System (ROS) default packages exposing the computational gra

The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization

A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions

Advantech iView, versions 5.6 and prior, has an improper authentication for critical function (CWE-306) issue. Successfu

This vulnerability allows remote attackers to execute arbitrary code on affected installations of C-MORE HMI EA9 Firmwar

This vulnerability allows remote attackers to issue commands on affected installations of C-MORE HMI EA9 Firmware versio

The UI in DevSpace 4.13.0 allows web sites to execute actions on pods (on behalf of a victim) because of a lack of authe

SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by direct

The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to severa

The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol,

It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions

VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the

Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. Th

Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access une

A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mech

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpo

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv

A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Pri

The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th

A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacke

A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and olde

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 9716

The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Li

Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside th

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy O

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on