Advisories · Weakness
CWE-520.
Every Advisory and CVE whose sources give the weakness CWE-520, newest first.
- CVSS 8.1 High
Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- CWE-520
- CVSS 7.1 High
Langflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpoints
- IBM Langflow OSS
- CWE-520
- CVSS 7.4 High
upKeeper Solutions upKeeper Instant Privilege Access: .NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper…
- upKeeper Solutions upKeeper Instant Privilege Access
- CWE-520
- CVSS 8.6 High
Iperius Backup 6.1.0 Privilege Escalation via Backup Job
- Iperius Backup
- CWE-520
- CVSS 4.3 Medium
OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability
- Broken access control
- Authentication bypass
<=0.19.3 · no fixed version yet
GHSA-46hr-3cq3-mcgp · CVE-2024-46943