Lucene search
+L

4222 matches found

Vulnrichment
Vulnrichment
added 2025/12/19 12:8 p.m.5 views

CVE-2025-1928 Improper Authentication in Restajet's Online Food Delivery System

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this...

9.1CVSS5.4AI score0.00335EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/19 12:8 p.m.44 views

CVE-2025-1928 Improper Authentication in Restajet's Online Food Delivery System

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation. This issue affects Online Food Delivery System: through 19122025. NOTE: The vendor was contacted early about this...

9.1CVSS0.00335EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/19 12:8 p.m.16 views

CVE-2025-1928

CVE-2025-1928 concerns Restajet Information Technologies Inc. Online Food Delivery System. Multiple connected sources confirm an issue with improper restriction of excessive authentication attempts up to version 19122025, enabling a password recovery exploitation and potentially leading to full a...

9.1CVSS5.4AI score0.00335EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2025/12/19 7:16 a.m.6 views

CVE-2025-66174

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.8CVSS0.00324EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/19 6:39 a.m.25 views

CVE-2025-66174

CVE-2025-66174 describes an improper authentication vulnerability in certain Hikvision DVRs related to serial-port authentication. An attacker with physical access could connect to affected devices and execute commands due to the flawed authentication implementation. The vulnerability is document...

6.8CVSS6.3AI score0.00324EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2025/12/19 6:39 a.m.8 views

EUVD-2025-204451

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.5CVSS6.2AI score0.00324EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/19 6:39 a.m.37 views

CVE-2025-66174

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.5CVSS0.00324EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/19 3:31 a.m.14 views

EUVD-2025-204433

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

6.5CVSS6.2AI score0.00322EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/12/19 12:32 a.m.42 views

CVE-2025-14908 JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

6.5CVSS0.00322EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/19 12:32 a.m.35 views

CVE-2025-14908

CVE-2025-14908 affects JeecgBoot up to 3.9.0, with the vulnerability located in jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the Multi-Tenant Management Module. Improper authentication results from manipulating the a...

8.1CVSS6.4AI score0.00322EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/19 12:32 a.m.3 views

CVE-2025-14908 JeecgBoot Multi-Tenant Management SysTenantController.java improper authentication

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module...

6.5CVSS6.4AI score0.00322EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/19 12:0 a.m.7 views

PT-2025-52416

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands...

6.5CVSS6.7AI score0.00324EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/18 6:15 p.m.8 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS5.8AI score0.00433EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/18 6:15 p.m.13 views

CVE-2025-14738

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.5CVSS0.00433EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/18 6:1 p.m.42 views

CVE-2025-14738 Configuration Disclosure Vulnerability in TP-Link WA850RE

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

7.1CVSS0.00433EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/12/17 3:7 a.m.16 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS6AI score0.00895EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/16 3:15 a.m.33 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS0.00895EPSS
SaveExploits1References4
OSV
OSV
added 2025/12/16 3:15 a.m.5 views

CVE-2025-14746

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

6.5CVSS5.3AI score0.00895EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/16 2:2 a.m.8 views

CVE-2025-14746 Ningyuanda TC155 RTSP Live Video Stream Endpoint improper authentication

A vulnerability has been found in Ningyuanda TC155 57.0.2.0. The affected element is an unknown function of the component RTSP Live Video Stream Endpoint. Such manipulation leads to improper authentication. The attack must be carried out from within the local network. The exploit has been disclos...

5.3CVSS5.8AI score0.00895EPSS
SaveExploits1References4
CVE
CVE
added 2025/12/16 2:2 a.m.26 views

CVE-2025-14746

CVE-2025-14746 concerns Ningyuanda TC155 57.0.2.0, specifically the RTSP Live Video Stream Endpoint. The vulnerability is an improper authentication issue in an unknown function of that component, allowing an attacker on the same local network to bypass authentication. Multiple sources (NVD, Red ...

6.5CVSS5.8AI score0.00895EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder