Vulnerabilities (CVE)

Filtered by CWE-288
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-4702 1 Yepas 1 Digital Yepas 2023-11-30 N/A 9.8 CRITICAL
Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1.
CVE-2023-46747 1 F5 20 Big-ip Access Policy Manager, Big-ip Advanced Firewall Manager, Big-ip Advanced Web Application Firewall and 17 more 2023-11-16 N/A 9.8 CRITICAL
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2021-27453 1 Mesalabs 1 Amegaview 2022-01-04 7.5 HIGH 9.8 CRITICAL
Mesa Labs AmegaView Versions 3.0 uses default cookies that could be set to bypass authentication to the web application, which may allow an attacker to gain access.
CVE-2021-43985 1 Myscada 1 Mypro 2021-12-29 7.5 HIGH 9.8 CRITICAL
An unauthenticated remote attacker can access mySCADA myPRO Versions 8.20.0 and prior without any form of authentication or authorization.