Lucene search
+L

4219 matches found

EUVD
EUVD
added 2026/01/14 6:31 p.m.9 views

EUVD-2023-35505

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

8.8CVSS5.8AI score0.00213EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/14 3:16 p.m.18 views

CVE-2026-22236

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the...

10CVSS0.00478EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/14 2:34 p.m.23 views

CVE-2026-22236

Technical details about CVE-2026-22236 are not publicly available in the provided documents. The descriptions summarize improper backend API authentication but do not specify affected components, versions, impact specifics, or fixes. Monitor for updates from vendors and security feeds.

10CVSS7AI score0.00478EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/14 2:34 p.m.38 views

CVE-2026-22236 Improper Authentication Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the...

10CVSS0.00478EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/14 2:34 p.m.8 views

CVE-2026-22236 Improper Authentication Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the...

10CVSS7AI score0.00478EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/14 2:34 p.m.6 views

CVE-2026-22236

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the...

10CVSS5.7AI score0.00478EPSS
SaveExploits0References2
NVD
NVD
added 2026/01/14 12:16 p.m.8 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS0.00193EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/01/14 11:34 a.m.7 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS6.7AI score0.00193EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/14 11:34 a.m.4 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.5AI score0.00193EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/01/14 11:34 a.m.11 views

CVE-2025-67859

A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...

5.1CVSS5.6AI score0.00193EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/14 12:0 a.m.16 views

PT-2026-2859

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX backend APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable APIs. Successful exploitation of this vulnerability could allow the...

10CVSS7.3AI score0.00478EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/13 10:52 p.m.7 views

CVE-2025-69273

Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier...

8.7CVSS7AI score0.00314EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/01/12 3:50 p.m.206 views

Exploit for Improper Authentication in Microsoft

CVE-2025-549...

8.8CVSS7AI score0.19354EPSS
SaveExploits1
CVE
CVE
added 2026/01/12 4:38 a.m.22 views

CVE-2025-69273

CVE-2025-69273 relates to Broadcom DX NetOps Spectrum running on Windows and Linux, with versions 24.3.10 and earlier affected. The issue is described as an improper authentication vulnerability that allows an authentication bypass, potentially enabling unauthorized access to the system. The link...

8.7CVSS6.6AI score0.00314EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/12 4:38 a.m.30 views

CVE-2025-69273 Spectrum broken authentication

Improper Authentication vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Authentication Bypass.This issue affects DX NetOps Spectrum: 24.3.10 and earlier...

8.7CVSS0.00314EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/12 12:0 a.m.13 views

PT-2026-1948

Name of the Vulnerable Software and Affected Versions Broadcom DX NetOps Spectrum versions 24.3.10 and earlier Description An improper authentication issue exists in Broadcom DX NetOps Spectrum on Windows and Linux systems, allowing for authentication bypass. The issue impacts DX NetOps Spectrum...

8.7CVSS6.8AI score0.00314EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.16 views

CVE-2023-25601

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

4.3CVSS6.6AI score0.01127EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:37 p.m.10 views

CVE-2023-50127

Hozard alarm system Alarmsysteem v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number...

5.9CVSS6.9AI score0.00444EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:25 p.m.10 views

CVE-2018-12013

Improper authentication in locked memory region can lead to unprivilged access to the memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables ...

7.8CVSS7.6AI score0.0021EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:26 a.m.9 views

CVE-2021-28248

CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perform an arbitrary number of /web/frames/ authentication attempts using different passwords, and eventually gain access to a targeted account, NOTE:...

7.5CVSS7.2AI score0.01392EPSS
SaveExploits1References1
Rows per page
Query Builder