3602 matches found
AIBattery 访问控制错误漏洞
AIBattery is a battery management tool for macOS by Wen Personal Developer. An access control error vulnerability exists in AIBattery 1.0.9 and earlier versions, which stems from a lack of authentication in the file AIBatteryHelper/XPC/BatteryXPCService.swift, which could lead to a local attack...
PT-2025-38405
Name of the Vulnerable Software and Affected Versions AIBattery versions up to 1.0.9 Description A vulnerability exists in AIBattery that results in missing authentication. The issue is located in an unknown function within the AIBatteryHelper/XPC/BatteryXPCService.swift file of the...
GO-2025-3951 Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh
Chaos Mesh's Chaos Controller Manager is Missing Authentication for Critical Function in github.com/chaos-mesh/chaos-mesh. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...
CVE-2025-9971
Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...
CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication
Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...
CVE-2025-9971
CVE-2025-9971 concerns Planet Technology’s Industrial Cellular Gateway, where a missing authentication vulnerability allows unauthenticated remote manipulation via a specific functionality. The connected sources describe the root cause as lack of authentication and indicate high impact on confide...
CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication
Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...
CVE-2025-10452
Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...
PT-2025-38125
Name of the Vulnerable Software and Affected Versions: Planet Technology Industrial Cellular Gateway affected versions not specified Description: Certain models of Industrial Cellular Gateway developed by Planet Technology are susceptible to a missing authentication issue. This allows...
Missing Critical Step in Authentication
Overview Affected versions of this package are vulnerable to Missing Critical Step in Authentication during OTP validation. An attacker can gain unauthorized access by reusing a valid time-based one-time password within its validity period. Remediation Upgrade...
CVE-2025-10452
Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...
CVE-2025-10452 Gotac｜Statistical Database System - Missing Authentication
Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...
CVE-2025-10452 Gotac｜Statistical Database System - Missing Authentication
Statistical Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents with high-level privileges...
PT-2025-37444
Name of the Vulnerable Software and Affected Versions: Gotac Statistical Database System affected versions not specified Description: The Gotac Statistical Database System has a Missing Authentication vulnerability. This allows unauthenticated remote attackers to read, modify, and delete database...
CVE-2025-9214
A missing authentication vulnerability was reported in some Lenovo printers that could allow a user to view limited device information or modify network settings via the CUPS service...
CVE-2025-10267
NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side...
CVE-2025-10267 NewType Infortech｜NUP Portal - Missing Authentication
NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side...
CVE-2025-10267
CVE-2025-10267 affects the NUP Portal by NewType Infortech. The issue is missing authentication, allowing unauthenticated remote attackers to upload files. If file extension restrictions are bypassed, attackers could upload a webshell and execute it on the server side. Modeled across multiple fee...
CVE-2025-10267 NewType Infortech｜NUP Portal - Missing Authentication
NUP Portal developed by NewType Infortech has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly upload files. If the attacker manages to bypass the file extension restrictions, they could upload a webshell and execute it on the server side...