CWE-419 · 9 records
Unprotected Primary Channel
CVEs in this class
9 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
55Plan | CVE-2019-11248Proof of concept | Kubernetes kubelet exposes /debug/pprof info on healthz portkubernetes · kubernetes · CWE-419 | High8.2 | — | 75.0% | Aug 28, 2019 |
39Monitor | CVE-2023-30859No exploit | Spigot Command Exploit in Tritontriton project · triton · CWE-419 | Critical9.8 | — | 1.0% | May 1, 2023 |
39Monitor | CVE-2024-50588No exploit | Unprotected Exposed Firebird Database with default credentialshasomed · elefant · CWE-419 | Critical9.8 | — | 0.6% | Nov 8, 2024 |
35Monitor | CVE-2024-2414No exploit | Unprotected Primary Channel vulnerability in Movistar 4G routermovistar · router movistar 4g · CWE-419 | High8.8 | — | 0.2% | Mar 13, 2024 |
33Monitor | CVE-2018-12120No exploit | Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `nonodejs · node.js · CWE-419 | High8.1 | — | 4.2% | Nov 28, 2018 |
31Monitor | CVE-2018-12539No exploit | In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM eclipse · openj9 · CWE-419 | High7.8 | — | 0.4% | Aug 14, 2018 |
28Monitor | CVE-2025-24030No exploit | Envoy Admin Interface Exposed through prometheus metrics endpointenvoyproxy · gateway · CWE-419 | High7.1 | — | 0.4% | Jan 23, 2025 |
21Monitor | CVE-2022-33932No exploit | Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vdell · emc powerscale onefs · CWE-419 | Medium5.3 | — | 0.9% | Aug 22, 2022 |
14Monitor | CVE-2024-39886No exploit | TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel.dream train internet inc. · tone store app · CWE-419 | Low3.7 | — | 0.2% | Jul 10, 2024 |
- CVE-2019-1124855Plan
Kubernetes kubelet exposes /debug/pprof info on healthz port
HighCVSS 8.2Proof of conceptEPSS 75%kubernetes · kubernetesAug 28, 2019
- CVE-2023-3085939Monitor
Spigot Command Exploit in Triton
CriticalCVSS 9.8No exploitEPSS 1%triton project · tritonMay 1, 2023
- CVE-2024-5058839Monitor
Unprotected Exposed Firebird Database with default credentials
CriticalCVSS 9.8No exploitEPSS 0%hasomed · elefantNov 8, 2024
- CVE-2024-241435Monitor
Unprotected Primary Channel vulnerability in Movistar 4G router
HighCVSS 8.8No exploitEPSS 0%movistar · router movistar 4gMar 13, 2024
- CVE-2018-1212033Monitor
Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `no
HighCVSS 8.1No exploitEPSS 4%nodejs · node.jsNov 28, 2018
- CVE-2018-1253931Monitor
In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM
HighCVSS 7.8No exploitEPSS 0%eclipse · openj9Aug 14, 2018
- CVE-2025-2403028Monitor
Envoy Admin Interface Exposed through prometheus metrics endpoint
HighCVSS 7.1No exploitEPSS 0%envoyproxy · gatewayJan 23, 2025
- CVE-2022-3393221Monitor
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel v
MediumCVSS 5.3No exploitEPSS 0%dell · emc powerscale onefsAug 22, 2022
- CVE-2024-3988614Monitor
TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel.
LowCVSS 3.7No exploitEPSS 0%dream train internet inc. · tone store appJul 10, 2024