Lucene search
+L

8932 matches found

Vulnrichment
Vulnrichment
•added 2025/12/19 12:32 a.m.•10 views

CVE-2025-14908 JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

6.5CVSS5.9AI score0.00347EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/19 12:32 a.m.•54 views

CVE-2025-14908

CVE-2025-14908 affects JeecgBoot up to 3.9.0, with the vulnerability located in jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the Multi-Tenant Management Module. Improper authentication results from manipulating the a...

8.1CVSS5.9AI score0.00347EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•8 views

CVE-2025-66174: Improper Authentication

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.8CVSS5.9AI score0.0035EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/19 12:00 a.m.•21 views

PT-2025-52416

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.5CVSS5.9AI score0.0035EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/19 12:00 a.m.•10 views

CVE-2025-14908: Improper Authentication

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

8.1CVSS5.9AI score0.00347EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/12/18 6:15 p.m.•21 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS5.4AI score0.00407EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/18 6:15 p.m.•24 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS0.00407EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/18 6:01 p.m.•55 views

CVE-2025-14738 Configuration Disclosure Vulnerability in TP-Link WA850RE

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.1CVSS0.00407EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•11 views

CVE-2025-14738: Improper Authentication

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS5.5AI score0.00407EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 3:07 a.m.•30 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS4.8AI score0.00884EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•6 views

CVE-2025-44005: Improper Authentication

An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks...

10CVSS8.3AI score0.09091EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•10 views

CVE-2025-14097: Improper Authentication

A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through othe...

7.2CVSS6.2AI score0.00465EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/16 3:15 a.m.•19 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS4.8AI score0.00884EPSS
SaveExploits1References4
NVD
NVD
•added 2025/12/16 3:15 a.m.•42 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS0.00884EPSS
SaveExploits1References4
CVE
CVE
•added 2025/12/16 2:02 a.m.•48 views

CVE-2025-14746

CVE-2025-14746 concerns Ningyuanda TC155 57.0.2.0, specifically the RTSP Live Video Stream Endpoint. The vulnerability is an improper authentication issue in an unknown function of that component, allowing an attacker on the same local network to bypass authentication. Multiple sources (NVD, Red ...

6.5CVSS4.8AI score0.00884EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/16 2:02 a.m.•17 views

CVE-2025-14746 Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

5.3CVSS4.8AI score0.00884EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/12/16 2:02 a.m.•22 views

EUVD-2025-203494

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

5.3CVSS4.8AI score0.00884EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/16 2:02 a.m.•65 views

CVE-2025-14746 Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

5.3CVSS0.00884EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/12/16 12:00 a.m.•29 views

PT-2025-51361

Name of the Vulnerable Software and Affected Versions Ningyuanda TC155 version 57.0.2.0 Description A flaw exists in the RTSP Live Video Stream Endpoint component of Ningyuanda TC155, specifically related to improper authentication. This issue allows for authentication bypass when the attack is...

6.5CVSS5.1AI score0.00884EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/16 12:00 a.m.•11 views

CVE-2025-14746: Improper Authentication

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS4.8AI score0.00884EPSS
SaveExploits1References5
Rows per page
Query Builder