Vulnerabilities (CVE)

Filtered by CWE-548
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-24396 1 Sap 1 Simple Diagnostics Agent 2022-06-21 7.2 HIGH 7.8 HIGH
The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.
CVE-2021-27505 1 Myscada 1 Mypro 2022-05-24 5.0 MEDIUM 7.5 HIGH
mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.