Lucene search
+L

1133 matches found

GithubExploit
GithubExploit
•added 2026/02/02 3:26 a.m.•187 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

No d...

10CVSS7.8AI score0.98786EPSS
SaveExploits39
RedhatCVE
RedhatCVE
•added 2026/01/31 9:12 a.m.•30 views

CVE-2026-24728

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

9.3CVSS6AI score0.00531EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/30 5:16 a.m.•18 views

CVE-2026-24728

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

9.3CVSS0.00531EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/30 3:48 a.m.•68 views

CVE-2026-24728

The vulnerability CVE-2026-24728 affects Interinfo DreamMaker, specifically the /servlet/baServer3 endpoint. A missing authentication for a critical function allows remote attackers to access exposed administrative functionality without prior authentication in DreamMaker versions before 2025/10/2...

9.3CVSS5.8AI score0.00531EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/30 3:48 a.m.•14 views

EUVD-2026-5016

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

9.3CVSS6AI score0.00531EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•15 views

The vulnerability of the Epson Web Installer software, a microprogramming-based solution for Epson printers and scanners, stems from the lack of authentication for a critical function. This allows attackers to trigger a service failure.

The vulnerability of the Epson Web Installer software for Epson printers and scanners is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow attackers to cause malfunctions in the system...

7.8CVSS7.1AI score0.00129EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/01/30 12:00 a.m.•10 views

The vulnerability of Airoha Technology’s GATT Bluetooth chip-based TWS earphones lies in the lack of authentication for a critical function, allowing attackers to circumvent existing security restrictions.

The vulnerability of Airoha Technology’s GATT Bluetooth chip-based TWS earbuds lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow attackers to circumvent existing security restrictions...

6.3CVSS6.6AI score0.09188EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/01/30 12:00 a.m.•27 views

PT-2026-5377

A missing authentication for critical function vulnerability in the /servlet/baServer3 endpoint of Interinfo DreamMaker versions before 2025/10/22 allows remote attackers to access exposed administrative functionality without prior authentication...

9.3CVSS6AI score0.00531EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/01/29 7:02 p.m.•10 views

CVE-2026-1453 Missing Authentication for Critical Function in KiloView Encoder Series

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

9.8CVSS5.9AI score0.00546EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/29 7:02 p.m.•39 views

CVE-2026-1453 Missing Authentication for Critical Function in KiloView Encoder Series

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

9.8CVSS0.00546EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/29 7:02 p.m.•22 views

EUVD-2026-4969

A missing authentication for critical function vulnerability in KiloView Encoder Series could allow an unauthenticated attacker to create or delete administrator accounts. This vulnerability can grant the attacker full administrative control over the product...

9.8CVSS5.9AI score0.00546EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/22 10:50 p.m.•8 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...

9.8CVSS5.6AI score0.00794EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/22 10:50 p.m.•6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...

9.8CVSS5.6AI score0.00794EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/22 10:50 p.m.•5 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...

9.8CVSS5.6AI score0.00794EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/22 10:50 p.m.•9 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...

9.8CVSS5.6AI score0.00794EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/22 10:50 p.m.•10 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the lack of JWT authentication middleware and RBAC authorization checks in the routing configuration for /api/v1/jobs endpoint. An attacker can view, update, and delete jobs by sending...

9.8CVSS5.6AI score0.00794EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/01/22 10:40 p.m.•38 views

CVE-2025-54816 EVMAPA Missing Authentication for Critical Function

This vulnerability occurs when a WebSocket endpoint does not enforce proper authentication mechanisms, allowing unauthorized users to establish connections. As a result, attackers can exploit this weakness to gain unauthorized access to sensitive data or perform unauthorized actions. Given that n...

9.4CVSS0.00475EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/19 9:50 p.m.•19 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the environment proxy middleware. An attacker can gain unauthorized access to and manipulate remote environment resources by sending unauthenticated requests that are proxied to remote...

9.8CVSS5.6AI score0.00522EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/19 9:50 p.m.•14 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the environment proxy middleware. An attacker can gain unauthorized access to and manipulate remote environment resources by sending unauthenticated requests that are proxied to remote...

9.8CVSS5.6AI score0.00522EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/14 6:22 p.m.•12 views

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

7.2CVSS7.7AI score0.01267EPSS
SaveExploits0References1
Rows per page
Query Builder