Lucene search
+L

1133 matches found

OSV
OSV
•added 2026/01/13 6:16 p.m.•10 views

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

7.2CVSS5.8AI score0.01267EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/01/13 5:56 p.m.•13 views

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

7.2CVSS5.8AI score0.01267EPSS
SaveExploits0References2Affected Software3
Positive Technologies
Positive Technologies
•added 2026/01/13 12:00 a.m.•31 views

PT-2026-2656

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description A missing authentication check for a critical function in Microsoft SQL Server can allow an authorized attacker to elevate privileges over a network. The issue, caused by missing...

9CVSS7AI score0.01267EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
•added 2026/01/09 11:22 a.m.•22 views

CVE-2021-22316

There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device's data security and functional availability...

6.8CVSS6.8AI score0.00185EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:20 a.m.•17 views

CVE-2021-33882

A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands...

8.6CVSS7.9AI score0.011EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:13 a.m.•25 views

CVE-2022-42473

A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password...

5.5CVSS6.7AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:57 a.m.•17 views

CVE-2023-4815

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.8CVSS6.8AI score0.00823EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 8:42 a.m.•24 views

CVE-2022-37680

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...

7.5CVSS6.8AI score0.00876EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/01/07 11:57 p.m.•18 views

Missing Authentication for Critical Function

Overview wolfssl is a Python module that encapsulates wolfSSL's C SSL/TLS library. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to improper enforcement of client certificate requirements in the CERTREQUIRED process. An attacker can gain...

9.3CVSS6.8AI score0.00334EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/07 4:55 a.m.•8 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS6.4AI score0.01519EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/07 4:55 a.m.•10 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS6.4AI score0.01519EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/01/06 1:12 a.m.•248 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

Bash Command Examples Batch Scanning python teamcit...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits19
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•14 views

Vulnerability of microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo. This vulnerability is related to the absence of authentication for a critical function, allowing attackers to compromise the integrity of protected information.

The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...

6.5CVSS5.8AI score0.00222EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•15 views

Vulnerability of microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo. This vulnerability is related to the absence of authentication for a critical function, allowing an intruder to trigger a service failure.

The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...

7.6CVSS5.8AI score0.00204EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/05 3:15 p.m.•28 views

CVE-2025-15026

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS0.00419EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/05 2:31 p.m.•44 views

CVE-2025-15026

CVE-2025-15026 affects Centreon Infra Monitoring, specifically the centreon-awie (Awie import module). The root cause is a missing authentication check for a critical function, allowing access to functionality not properly constrained by ACLs. Affected versions are: 25.10.0–25.10.1 (before 25.10....

9.8CVSS8.1AI score0.00419EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/01/05 2:31 p.m.•25 views

EUVD-2026-0848

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS6.5AI score0.00419EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/26 12:19 a.m.•20 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.4AI score0.00212EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/25 8:42 a.m.•213 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

cve...

10CVSS8AI score0.98786EPSS
SaveExploits39
EUVD
EUVD
•added 2025/12/25 6:30 a.m.•17 views

EUVD-2025-205373

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS6.9AI score0.00212EPSS
SaveExploits0References2
Rows per page
Query Builder