Lucene search
+L

1133 matches found

OSV
OSV
•added 2025/08/18 1:17 p.m.•12 views

GO-2025-3865 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...

7.2CVSS7.2AI score0.00205EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/18 1:17 p.m.•29 views

GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence

Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...

7.2CVSS7.2AI score0.00241EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/15 6:31 p.m.•22 views

CVE-2025-8754

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...

8.7CVSS7.2AI score0.00363EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/08/14 12:00 a.m.•11 views

The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to the lack of authentication for a critical function, allows attackers to escalate their privileges.

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...

7.2CVSS5.8AI score0.00205EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/08/14 12:00 a.m.•11 views

The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to the lack of authentication for a critical function, allows a hacker to gain read-only and edit access to data.

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain read and edit access to data...

7.2CVSS5.8AI score0.00241EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/13 7:31 p.m.•11 views

CVE-2025-7679

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT...

9.2CVSS6.9AI score0.00459EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/13 7:31 p.m.•12 views

CVE-2025-7677

A denial-of-service DoS attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT...

8.2CVSS6.7AI score0.00332EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/08/13 6:29 p.m.•23 views

CVE-2025-53191

Missing Authentication for Critical Function vulnerability in ABB Aspect.This issue affects Aspect: before 3.08.04-s01...

8.4CVSS7.3AI score
SaveExploits0References1
NVD
NVD
•added 2025/08/13 6:15 p.m.•15 views

CVE-2025-8754

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...

8.7CVSS0.00363EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/13 5:40 p.m.•54 views

CVE-2025-8754

CVE-2025-8754 concerns ABB AbilityTM zenon (versions 7.50–14). The vulnerability is a Missing Authentication for a Critical Function, exposing a command/operation over NETWORK with no privileges required and no user interaction. According to multiple sources, the issue can impact availability (hi...

8.7CVSS7.2AI score0.00363EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/13 5:40 p.m.•30 views

CVE-2025-8754 ABB AbilityTM zenon Remote Transport Vulnerability

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...

8.7CVSS0.00363EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/13 5:40 p.m.•8 views

CVE-2025-8754 ABB AbilityTM zenon Remote Transport Vulnerability

Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...

8.7CVSS7.2AI score0.00363EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•11 views

CVE-2025-53789

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/08/12 7:00 a.m.•9 views

Windows StateRepository API Server file Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

7.8CVSS7.5AI score0.00357EPSS
SaveExploits0
Snyk
Snyk
•added 2025/08/11 9:31 p.m.•5 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to an API call to edit the channel subscription endpoint. An attacker can modify channel subscriptions by sending unauthorized API requests. Remediation Upgrade...

7.2CVSS6.9AI score0.00241EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/11 7:15 p.m.•13 views

CVE-2025-7679

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT...

9.2CVSS0.00459EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/11 7:15 p.m.•12 views

CVE-2025-7677

A denial-of-service DoS attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT...

8.2CVSS0.00332EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/11 7:15 p.m.•13 views

CVE-2025-53191

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

SaveExploits0
Cvelist
Cvelist
•added 2025/08/11 6:36 p.m.•24 views

CVE-2025-7679 Session ID Basic Auth Bypass

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT...

9.2CVSS0.00459EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/11 6:36 p.m.•36 views

CVE-2025-7679

ABB Aspect (ASPECT) BMS/BAS suffers an authentication bypass across all versions; root cause involves debugging code left in market release. ATT&CK/impact details: attacker could bypass login to access files, change system time, and invoke functions without authentication; DoS is possible if on l...

9.2CVSS6.3AI score0.00459EPSS
SaveExploits0References1
Rows per page
Query Builder