Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Meteocontrol Component: Web'log Light Clear all filters
TI-2016-02066 CVE-2016-2296 · GHSA-g7wf-vfjj-8q52

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require…

Priority HIGH 76

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vec…

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.6426 Published 2016-05-14 No fix listed CWE-254