EUVD-2025-37762

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control ATC and pilots...

CVE-2025-12476 Resource Lacking AuthN

Resource Lacking AuthN.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...

EUVD-2014-0190

Malware in sbrugna...

CVE-2025-56578

An issue in RTSPtoWeb v.2.4.3 allows a remote attacker to obtain sensitive information and executearbitrary code via the lack of authentication mechanisms...

Linux Distros Unpatched Vulnerability : CVE-2025-0896

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by...

The vulnerability of the Bank Account Application component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Bank Account Application component in the SAP S/4HANA software platform is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to potentially compromise the integrity of the protected information...

Packet Power EMX and EG

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain full access to the device without authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimizing...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems stems from the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

COROS PACE 3 安全漏洞

COROS PACE 3 is a GPS sports watch from the Chinese company COROS. A security vulnerability exists in COROS PACE 3 3.0808.0 and prior versions, which stems from a lack of authentication and could lead to a man-in-the-middle attack...

The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.

The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system, which manages enterprise resources, allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Design Tools component of the JD Edwards EnterpriseOne Tools system’s resource management system is related to the absence of authentication. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data through HTTP requests...

The vulnerability of Veeam Backup & Replication’s protection mechanism for cloud, virtual, and physical systems lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.

The vulnerability of Veeam Backup & Replication’s protection tools for cloud, virtual, and physical systems stems from the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to increase their privileges...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers arises from the lack of authentication mechanisms. This vulnerability allows attackers to influence the integrity of the protected information.

The vulnerability of the application programming interface of the Cisco Nexus Dashboard platform for analyzing and automating operations in cloud computing data centers is related to the lack of authentication. Exploiting this vulnerability could allow a malicious actor to influence the integrity...

CVE-2024-40091

Vilo 5 Mesh WiFi System = 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated attackers to retrieve logs with sensitive system...

MOXA Service 安全漏洞

MOXA Service is a hardware device infrastructure service from China MOXA MOXA. A security vulnerability exists in MOXA Service, which stems from a lack of authentication during command sending and could allow an attacker to execute specific commands, resulting in unauthorized configuration file...

The vulnerability of the Single Sign-On (SSO) function of the SAP BusinessObjects Business Intelligence platform allows a hacker to gain full access to the device.

The vulnerability of the Single Sign-On SSO function of the SAP BusinessObjects Business Intelligence platform is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the device by obtaining an...

The vulnerability of the My Overtime Request component of the SAP Fiori business application platform allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the My Overtime Request component of the SAP Fiori business application design platform is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected...

The vulnerability of the BMC (Baseboard Management Controller) on the NVIDIA DGX A100 server allows a hacker to enhance their privileges, gain access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the BMC Baseboard Management Controller in NVIDIA’s DGX A100 server lies in the absence of authentication procedures for critical functions. Exploiting this vulnerability allows an attacker to enhance their privileges, gain read, write, or delete access to data, execute...

The vulnerability in the web interface of Cisco SPA112 dual-port telephone adapters allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for Cisco SPA112 dual-port telephone adapters is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by loading a specially crafted...