Lucene search
+L

1141 matches found

BDU FSTEC
BDU FSTEC
•added 2023/11/02 12:00 a.m.•26 views

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format lies in the lack of authentication for a critical function. This allows attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the Kavita Kavitareader software for reading e-books in the Kavita format is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to influence the confidentiality and integrity of the protected information...

8.5CVSS5.5AI score0.00484EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/02 12:00 a.m.•23 views

The vulnerability of the microprogrammed software of the programmable logic controller LS ELECTRIC XBC-DN32U lies in the lack of authentication for a critical function. This allows attackers to escalate their privileges and gain control over the device.

The vulnerability of the microprogrammed logic controller LS ELECTRIC XBC-DN32U lies in the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to enhance their privileges and gain control over the device...

10CVSS7.8AI score0.00708EPSS
SaveExploits0References2Affected Software1
GithubExploit
GithubExploit
•added 2023/11/01 9:31 a.m.•666 views

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

Vulnerability Details fofa: title="BIG-IP" || i...

9.8CVSS9.6AI score0.96515EPSS
SaveExploits17
BDU FSTEC
BDU FSTEC
•added 2023/10/12 12:00 a.m.•20 views

The vulnerability of the software implementation of the GTP protocol (GPRS Tunneling Protocol) for Open5GS mobile communication networks lies in the lack of authentication for a critical function, allowing attackers to access confidential information.

The vulnerability of the software implementation of the GTP protocol GPRS Tunneling Protocol for mobile communication networks based on Open5GS is related to the absence of authentication for the critical function. Exploiting this vulnerability can allow a malicious actor to gain access to...

7.8CVSS7.2AI score0.00511EPSS
SaveExploits0References2Affected Software1
Veracode
Veracode
•added 2023/09/28 5:55 a.m.•26 views

Missing Authentication For Critical Function

github.com/cilium/cilium is vulnerable to Missing Authentication. The vulnerability is due to the ValidateCNP function in validator.go which lacks checks for a policy with any malicious or incorrectly match configurations, allowing an attacker to create policies that bypass namespace restrictions...

8.1CVSS6.7AI score0.00482EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2023/09/27 3:18 p.m.•44 views

CVE-2023-36851

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauthoperation.php that doesn't require authentication, an...

5.3CVSS6.4AI score0.01123EPSS
SaveIn wildExploits0References2Affected Software1
NVD
NVD
•added 2023/09/14 9:15 a.m.•28 views

CVE-2023-4516

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...

7.8CVSS7.5AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/14 9:15 a.m.•15 views

CVE-2023-4516

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...

7.8CVSS5.9AI score0.00182EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/14 9:15 a.m.•21 views

Authentication flaw

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...

4.3CVSS7.5AI score0.00182EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/14 8:54 a.m.•10 views

CVE-2023-4516

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...

7.8CVSS7.5AI score0.00182EPSS
SaveExploits0References1
OSV
OSV
•added 2023/09/07 9:30 a.m.•29 views

GHSA-PJ2H-85JQ-G5VG Answer Missing Authentication for Critical Function

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.3CVSS8.6AI score0.00823EPSS
SaveExploits1References4
NVD
NVD
•added 2023/09/07 7:15 a.m.•32 views

CVE-2023-4815

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.8CVSS8.7AI score0.00823EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/07 7:15 a.m.•21 views

Authentication flaw

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

6.5CVSS8.8AI score0.00823EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/07 6:26 a.m.•16 views

CVE-2023-4815 Missing Authentication for Critical Function in answerdev/answer

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.3CVSS6.8AI score0.00823EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/09/07 6:26 a.m.•32 views

CVE-2023-4815 Missing Authentication for Critical Function in answerdev/answer

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.3CVSS9AI score0.00823EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/07 6:26 a.m.•24 views

CVE-2023-4815 Missing Authentication for Critical Function in answerdev/answer

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.3CVSS8.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/09/06 12:00 a.m.•7 views

PT-2023-30712 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to v1.1.3 Description: The issue is related to missing authentication for a critical function in the GitHub repository answerdev/answer. This could potentially allow unauthorized access to sensitive data or...

8.8CVSS8.6AI score0.00823EPSS
SaveExploits1References12
OSV
OSV
•added 2023/08/31 4:15 p.m.•17 views

CVE-2023-34392

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

8.8CVSS5.9AI score0.00453EPSS
SaveExploits0References2
NVD
NVD
•added 2023/08/31 4:15 p.m.•32 views

CVE-2023-34392

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

8.8CVSS8.5AI score0.00453EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/31 4:15 p.m.•38 views

Authentication flaw

A Missing Authentication for Critical Function vulnerability in the Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator could allow an attacker to run arbitrary commands on managed devices by an authorized device operator. See Instruction Manual Appendix A and Appendix E dated...

6.8CVSS8.8AI score0.00453EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder