CWE-425 · Direct Request (Forced Browsing) (page 2)
Page 2 of 3 — CVEs classified under CWE-425, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25626 | Medium | 5.3 | 2022-12-16 | An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server sid… |
CVE-2022-45276 | Critical | 9.8 | 2022-11-23 | An issue in the /index/user/user_edit.html component of YJCMS v1.0.9 allows unauthenticated attackers to obtain the Administrator account password. |
CVE-2022-40845 | Medium | 6.5 | 2022-11-15 | The Tenda AC1200 Router model W15Ev2 V15.11.0.10(1576) is affected by a password exposure vulnerability. When combined with the improper authorization/improper… |
CVE-2022-42197 | Medium | 6.5 | 2022-10-20 | In Simple Exam Reviewer Management System v1.0 the User List function has improper access control that allows low privileged users to modify user permissions t… |
CVE-2022-42238 | High | 8.8 | 2022-10-11 | A Vertical Privilege Escalation issue in Merchandise Online Store v.1.0 allows an attacker to get access to the admin dashboard. |
CVE-2022-41746 | Critical | 9.1 | 2022-10-10 | A forced browsing vulnerability in Trend Micro Apex One could allow an attacker with access to the Apex One console on affected installations to escalate privi… |
CVE-2022-36158 | High | 8.0 | 2022-09-26 | Contec FXA3200 version 1.13.00 and under suffers from Insecure Permissions in the Wireless LAN Manager interface which allows malicious actors to execute Linux… |
CVE-2022-2551 | High | 7.5 | 2022-08-22 | The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin… |
CVE-2022-2544 | High | 7.5 | 2022-08-22 | The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory where it stores uploaded resumes, making it vulnerable to unauthenticated Dire… |
CVE-2022-34574 | Medium | 5.7 | 2022-07-25 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the key information of the device via accessing Tft… |
CVE-2022-34573 | Medium | 6.3 | 2022-07-25 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to arbitrarily configure device settings via accessing the pa… |
CVE-2022-34572 | Medium | 5.7 | 2022-07-25 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the telnet password via accessing the page tftp.txt. |
CVE-2022-34571 | High | 8.0 | 2022-07-25 | An access control issue in Wavlink WiFi-Repeater RPTA2-77W.M4300.01.GD.2017Sep19 allows attackers to obtain the system key information and execute arbitrary co… |
CVE-2022-34570 | High | 7.5 | 2022-07-25 | WAVLINK WN579 X3 M79X3.V5030.191012/M79X3.V5030.191012 contains an information leak which allows attackers to obtain the key information via accessing the mess… |
CVE-2022-1551 | Medium | 6.5 | 2022-07-25 | The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other use… |
CVE-2022-2192 | High | 7.5 | 2022-07-19 | Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path… |
CVE-2022-29238 | Medium | 4.3 | 2022-06-14 | Jupyter Notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.12, authenticated requests to the notebook server with `Co… |
CVE-2022-31847 | High | 7.5 | 2022-06-14 | A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted P… |
CVE-2021-40616 | Medium | 6.5 | 2022-06-14 | thinkcmf v5.1.7 has an unauthorized vulnerability. The attacker can modify the password of the administrator account with id 1 through the background user mana… |
CVE-2021-44582 | High | 8.8 | 2022-06-10 | A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privi… |
CVE-2022-31485 | Medium | 5.3 | 2022-06-06 | An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vulnerability impact… |
CVE-2022-31484 | High | 7.5 | 2022-06-06 | An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts products based on H… |
CVE-2022-31480 | High | 7.5 | 2022-06-06 | An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). This vulnerability impa… |
CVE-2022-28799 | High | 8.8 | 2022-06-02 | The TikTok application before 23.7.3 for Android allows account takeover. A crafted URL (unvalidated deeplink) can force the com.zhiliaoapp.musically WebView t… |
CVE-2022-28991 | High | 7.5 | 2022-05-20 | Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files. |
CVE-2021-34588 | High | 8.6 | 2022-04-27 | In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at use… |
CVE-2022-26777 | Medium | 5.3 | 2022-04-16 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view license details. |
CVE-2022-26653 | Medium | 5.3 | 2022-04-16 | Zoho ManageEngine Remote Access Plus before 10.1.2137.15 allows guest users to view domain details (such as the username and GUID of an administrator). |
CVE-2022-27480 | High | 7.5 | 2022-04-12 | A vulnerability has been identified in SICAM A8000 CP-8031 (All versions < V4.80), SICAM A8000 CP-8050 (All versions < V4.80). Affected devices do not require… |
CVE-2022-28365 | Medium | 5.3 | 2022-04-09 | Reprise License Manager 14.2 is affected by an Information Disclosure vulnerability via a GET request to /goforms/rlminfo. No authentication is required. The i… |
CVE-2022-1077 | Medium | 5.3 | 2022-03-29 | A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A… |
CVE-2022-26279 | Critical | 9.8 | 2022-03-24 | EyouCMS v1.5.5 was discovered to have no access control in the component /data/sqldata. |
CVE-2022-24385 | Medium | 6.5 | 2022-03-14 | A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrack 100.0.8019.1401… |
CVE-2021-46378 | High | 7.5 | 2022-03-04 | DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerability through an unauthenticated remote configuration download. |
CVE-2022-26159 | Medium | 5.3 | 2022-02-28 | The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-comple… |
CVE-2022-23607 | Medium | 6.5 | 2022-02-01 | treq is an HTTP library inspired by requests but written on top of Twisted's Agents. Treq's request methods (`treq.get`, `treq.post`, etc.) and `treq.client.HT… |
CVE-2021-24046 | Medium | 5.3 | 2022-01-14 | A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application… |
CVE-2021-42748 | Medium | 5.3 | 2022-01-10 | In Beaver Builder through 2.5.0.3, attackers can bypass the visibility controls protection mechanism via the REST API. |
CVE-2021-24831 | High | 7.5 | 2022-01-03 | All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to… |
CVE-2021-24695 | High | 7.5 | 2021-11-08 | The Simple Download Monitor WordPress plugin before 3.9.6 saves logs in a predictable location, and does not have any authentication or authorisation in place… |
CVE-2021-42671 | High | 7.5 | 2021-11-05 | An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can… |
CVE-2021-36560 | Critical | 9.8 | 2021-11-02 | Phone Shop Sales Managements System using PHP with Source Code 1.0 is vulnerable to authentication bypass which leads to account takeover of the admin. |
CVE-2018-16060 | High | 7.5 | 2021-10-15 | Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct reques… |
CVE-2021-36745 | Critical | 9.8 | 2021-09-29 | A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProt… |
CVE-2021-40875 | High | 7.5 | 2021-09-22 | Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sensitive information exposure. A threat actor can access the /files.md5 file on t… |
CVE-2021-26085 | Medium | 5.3 | 2021-08-03 | Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability… |
CVE-2021-20114 | High | 7.5 | 2021-07-30 | When installed following the default/recommended settings, TCExam <= 14.8.1 allowed unauthenticated users to access the /cache/backup/ directory, which include… |
CVE-2021-28150 | Medium | 5.5 | 2021-05-06 | Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi. |
CVE-2021-24238 | Medium | 6.5 | 2021-04-22 | The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the req… |
CVE-2021-24215 | Critical | 9.8 | 2021-04-12 | An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website custom… |
CVE-2021-30144 | Medium | 4.3 | 2021-04-06 | The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the last ten events, the c… |
CVE-2021-22180 | Medium | 4.3 | 2021-03-26 | An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analyt… |
CVE-2020-35570 | Medium | 5.3 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is a… |
CVE-2021-3113 | High | 7.5 | 2021-01-17 | Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For exam… |
CVE-2019-20484 | High | 8.1 | 2021-01-05 | An issue was discovered in Viki Vera 4.9.1.26180. A user without access to a project could download or upload project files by opening the Project URL directly… |
CVE-2020-35391 | Critical | 9.6 | 2021-01-01 | Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information (possibly including an http_passwd line) via a direct request for cgi-… |
CVE-2019-25012 | High | 7.5 | 2021-01-01 | The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered… |
CVE-2019-12768 | Critical | 9.8 | 2020-12-30 | An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02_J65H Hot Fix. Attackers can bypass authentication via forceful browsing. |
CVE-2020-13474 | Medium | 6.5 | 2020-12-28 | In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/E… |
CVE-2020-7541 | Medium | 5.3 | 2020-12-11 | A CWE-425: Direct Request ('Forced Browsing') vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premium and ass… |
CVE-2020-29656 | High | 7.5 | 2020-12-09 | An information disclosure vulnerability exists in RT-AC88U Download Master before 3.1.0.108. A direct access to /downloadmaster/dm_apply.cgi?action_mode=initia… |
CVE-2020-28937 | High | 7.5 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results… |
CVE-2020-24765 | High | 7.5 | 2020-10-20 | InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system… |
CVE-2020-26150 | High | 7.5 | 2020-09-30 | info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. |
CVE-2020-24660 | Critical | 9.8 | 2020-09-14 | An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submi… |
CVE-2020-24203 | Critical | 9.8 | 2020-08-27 | Insecure File Permissions and Arbitrary File Upload in the upload pic function in updatesubcategory.php in Projects World Travel Management System v1.0 allows… |
CVE-2020-13850 | High | 7.5 | 2020-06-11 | Artica Pandora FMS 7.44 has inadequate access controls on a web folder. |
CVE-2019-2388 | Medium | 5.8 | 2020-05-13 | In affected Ops Manager versions there is an exposed http route was that may allow attackers to view a specific access log of a publicly exposed Ops Manager in… |
CVE-2020-11561 | High | 8.8 | 2020-04-07 | In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item"… |
CVE-2016-1000111 | Medium | 5.3 | 2020-03-11 | Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence… |
CVE-2020-10248 | High | 7.5 | 2020-03-09 | BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3. |
CVE-2020-8439 | Medium | 6.5 | 2020-03-07 | Monstra CMS through 3.0.4 allows remote authenticated users to take over arbitrary user accounts via a modified login parameter to an edit URI, as demonstrated… |
CVE-2019-17646 | High | 7.5 | 2020-03-05 | An issue was discovered in Centreon before 18.10.8, 19.04.5, and 19.10.2. It provides sensitive information via an unauthenticated direct request for api/exter… |
CVE-2019-17645 | High | 7.5 | 2020-03-05 | An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via an unauthenticated direct request for i… |
CVE-2019-17644 | High | 7.5 | 2020-03-04 | An issue was discovered in Centreon before 2.8-30, 18.10-8, 19.04-5, and 19.10-2.. It provides sensitive information via an unauthenticated direct request for… |
CVE-2019-17643 | High | 7.5 | 2020-03-04 | An issue was discovered in Centreon before 2.8-30,18.10-8, 19.04-5, and 19.10-2. It provides sensitive information via an unauthenticated direct request for in… |
CVE-2019-16388 | Medium | 4.3 | 2019-11-26 | PEGA Platform 8.3.0 is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyStream=MyAlerts request to get Audit Log informatio… |
CVE-2019-16386 | Medium | 4.3 | 2019-11-26 | PEGA Platform 7.x and 8.x is vulnerable to Information disclosure via a direct prweb/sso/random_token/!STANDARD?pyActivity=GetWebInfo&target=popup&pzHarnessID=… |
CVE-2019-16340 | Critical | 9.8 | 2019-11-21 | Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cgi URI. |
CVE-2019-14927 | High | 7.5 | 2019-10-28 | An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. An unauthenticated remote configura… |
CVE-2019-17503 | Medium | 5.3 | 2019-10-11 | An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd)… |
CVE-2019-11326 | High | 8.8 | 2019-09-20 | An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product is protected by a login. A gue… |
CVE-2019-1220 | Medium | 4.3 | 2019-09-11 | A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft… |
CVE-2019-9584 | Critical | 9.8 | 2019-08-14 | eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain VPN profile details, shutting down the… |
CVE-2019-13030 | High | 8.2 | 2019-08-14 | eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process, resulti… |
CVE-2019-14347 | High | 8.8 | 2019-08-06 | Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add… |
CVE-2019-9884 | Critical | 9.8 | 2019-07-25 | eClass platform < ip.2.5.10.2.1 allows an attacker to use GETS method to request /admin page to bypass the password validation and access management page. |
CVE-2019-13981 | Medium | 5.3 | 2019-07-19 | In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is re… |
CVE-2019-12583 | Critical | 9.1 | 2019-06-27 | Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by direct… |
CVE-2019-1899 | Medium | 5.3 | 2019-06-20 | A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices… |
CVE-2019-1898 | Medium | 5.3 | 2019-06-20 | A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the… |
CVE-2019-3934 | Medium | 5.3 | 2019-04-30 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code sending a crafted HTTP POST request to log… |
CVE-2019-3933 | Medium | 5.3 | 2019-04-30 | Crestron AM-100 with firmware 1.6.0.2 and AM-101 with firmware 2.7.0.2 allows anyone to bypass the presentation code simply by requesting /images/browserslide… |
CVE-2019-3916 | High | 7.5 | 2019-04-11 | Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retriev… |
CVE-2018-18862 | High | 8.8 | 2019-03-21 | BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Detai… |
CVE-2019-3917 | High | 7.5 | 2019-03-05 | The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 allows a remote, unauthenticated attacker to enable telnetd on the router via a craf… |
CVE-2019-9552 | Critical | 9.8 | 2019-03-04 | Eloan V3.0 through 2018-09-20 allows remote attackers to list files via a direct request to the p2p/api/ or p2p/lib/ or p2p/images/ URI. |
CVE-2019-6551 | High | 7.5 | 2019-02-28 | Pangea Communications Internet FAX ATA all Versions 3.1.8 and prior allow an attacker to bypass user authentication using a specially crafted URL to cause the… |
CVE-2019-7736 | Critical | 9.8 | 2019-02-11 | D-Link DIR-600M C1 3.04 devices allow authentication bypass via a direct request to the wan.htm page. NOTE: this may overlap CVE-2019-13101. |
CVE-2019-6126 | High | 7.5 | 2019-01-11 | The Admin Panel of PHP Scripts Mall Advance Peer to Peer MLM Script v1.7.0 allows remote attackers to bypass intended access restrictions by directly navigatin… |