176 matches found
CVE-2026-59506
CWE-306: Missing Authentication for Critical Function...
CVE-2026-59506
Technical details are provided only in the Initial Description (CWE-306, CVSS 3.1, CRITICAL) and no connected documents contain further technical specifics for CVE-2026-59506.
CVE-2026-59506
CWE-306: Missing Authentication for Critical Function...
EUVD-2026-57773
CWE-306: Missing Authentication for Critical Function...
CVE-2026-59506 Priority – CWE-306: Missing Authentication for Critical Function
CWE-306: Missing Authentication for Critical Function...
Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure
Arcane 1.18.0 contains an information disclosure caused by missing authorization on /api/templates GET endpoints, letting unauthenticated network clients read sensitive Compose YAML and .env content, exploit requires network access id: CVE-2026-42461 info: name: Arcane 1.18.0 - Unauthenticated...
Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution
Oracle E-Business Suite 12.2.3 through 12.2.11 is susceptible to remote code execution via the Oracle Web Applications Desktop Integrator product, Upload component. An attacker with HTTP network access can execute malware, obtain sensitive information, modify data, and/or gain full control over a...
PT-2026-48909
Name of the Vulnerable Software and Affected Versions Aqara Board service affected versions not specified Description The Aqara Board service at the endpoint "op-test.aqara.com" accepts arbitrary MQTT command payloads and forwards them to the platform's HiveMQ broker without authentication. This...
📄 WordPress Chart 3.5.9 Missing Authentication
The Chartify WordPress Chart plugin contains a missing authentication vulnerability in all versions up to and including 3.5.9. The plugin registers an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter without any nonce or capability checks...
CVE-2021-22805
A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause deletion of arbitrary files in the context of the user running IGSS due to lack of validation of network messages. Affected Product: Interactive Graphical SCADA System Data Collector dc.exe V15.0.0.21243...
Exploit for CVE-2025-11171
CVE-2025-11171: Missing Authentication in Chartify WordPress P...
EUVD-2019-16374
Malware in sbrugna...
EUVD-2020-28604
Malware in sbrugna...
EUVD-2025-4157
Malicious code in bioql PyPI...
EUVD-2021-9958
Malicious code in bioql PyPI...
EUVD-2025-4154
Malicious code in bioql PyPI...
EUVD-2025-4178
Malicious code in bioql PyPI...
EUVD-2025-4176
Malicious code in bioql PyPI...