CWE-420

Total CVEs
13
Vulnerabilities
Avg CVSS v3
7.6
High
Avg CVSS v2
4.9
Medium
Latest CVE
2024
Most Recent

Severity Distribution

Critical 2
15.4%
High 7
53.8%
Medium 4
30.8%
Low 0
0%

External References

All CVEs (13)

Page 1 of 1
CVSS:10.0(Critical)

Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements and claim devices outright.

CVSS:10.0(Critical)

Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software...

CVSS:8.8(High)

An improper access restriction in NI MeasurementLink Python services could allow an attacker on an adjacent network to reach services exposed on localhost. These services were previously thought to be...

CVSS:8.8(High)

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound...

CVSS:8.7(High)

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component...

CVSS:8.1(High)

Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-76605) This vulner...

CVSS:8.1(High)

A connection hijacking vulnerability exists in some Huawei home routers. Successful exploitation of this vulnerability may cause DoS or information leakage.(Vulnerability ID:HWPSIRT-2023-34408) This v...

CVSS:7.9(High)

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This ena...

CVSS:6.8(Medium)

Moby) is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon componen...

CVSS:4.9(Medium)

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information.

CVSS:4.9(Medium)

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. This issue affects: GateManager all versions prior to 9.7.

CVSS:4.7(Medium)

Unprotected alternative channel of return branch target prediction in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

A vulnerability exists in Rockwell Automation affected products that allows a threat actor to bypass the Trusted® Slot feature in a ControlLogix® controller. If exploited on any affected module in a 1...