CWE-620 (page 2)
Page 2 of 2 — CVEs classified under CWE-620, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34785 | Medium | 6.5 | 2021-09-09 | Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or… |
CVE-2021-22773 | Medium | 6.5 | 2021-07-21 | A CWE-620: Unverified Password Change vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2… |
CVE-2020-7378 | Critical | 9.1 | 2020-11-24 | CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affec… |
CVE-2018-8916 | Medium | 6.3 | 2018-06-08 | Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to reset p… |
CVE-2017-14005 | High | 8.8 | 2017-10-17 | An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the applicatio… |