Lucene search
+L

6944 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•7 views

CVE-2024-41791: Missing Authentication for Critical Function

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager All versions. The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the...

7.3CVSS7AI score0.00389EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•7 views

CVE-2024-41793: Missing Authentication for Critical Function

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager All versions. The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device...

8.6CVSS7.5AI score0.00551EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/04/07 2:43 p.m.•6 views

Missing Authentication for Critical Function

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Missing Authentication for Critical Function at the /api/v1/validate/code endpoint, which allows an attacker to execute arbitrary code by sending malicious HTTP requests...

9.8CVSS8.7AI score0.99993EPSS
SaveExploits37References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/04/07 8:44 a.m.•66 views

Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series'

Overview Wi-Fi AP UNIT 'AC-WPS-11ac series' provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below. Incorrect privilege assignment in the WEB UI the setting page CWE-266 - CVE-2025-23407 OS command injection in the WEB UI the setting page CWE-78 - CVE-2025-25053...

9.8CVSS8AI score0.01002EPSS
SaveExploits0References17
NVD
NVD
•added 2025/04/02 10:15 p.m.•28 views

CVE-2025-0257

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS0.00306EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/02 10:15 p.m.•16 views

CVE-2025-0257

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/02 10:04 p.m.•11 views

CVE-2025-0257 HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

6.3CVSS7.2AI score0.00306EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•6 views

CVE-2025-25060: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker...

8.2CVSS7.6AI score0.00512EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•21 views

PT-2025-14561 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to missing authentication in the Agent Relay service, which could allow unauthorized access to other services or potential exposure of sensitive...

7.5CVSS6.2AI score0.00306EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•10 views

CVE-2025-0257: Missing Authentication for Critical Function

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/03/31 12:00 a.m.•23 views

WordPress Checkout Mestres do WP for WooCommerce 8.7.5 Missing Authentication

WordPress Checkout Mestres do WP for WooCommerce plugin versions 8.6.5 through 8.7.5 suffer from a missing authentication vulnerability that allows you to update options...

9.8CVSS7AI score0.0072EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/03/29 3:21 p.m.•38 views

CVE-2024-56469

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay...

6.3CVSS7.1AI score0.00257EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/03/27 3:17 p.m.•20 views

Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to unauthroized access to other services (CVE-2024-56469)

Summary IBM UrbanCode Deploy UCD / IBM DevOps Deploy could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service. Vulnerability Details CVEID:CVE-2024-56469 DESCRIPTION: IBM UrbanCode Deploy UCD / IBM DevOps...

6.3CVSS7AI score0.00257EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2025/03/27 3:15 p.m.•35 views

CVE-2024-56469

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay...

6.3CVSS0.00257EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/27 3:15 p.m.•18 views

CVE-2024-56469

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay...

6.3CVSS5.8AI score0.00257EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 2:39 p.m.•81 views

CVE-2025-1997

IBM UrbanCode Deploy (UCD) and IBM DevOps Deploy contain an HTML injection vulnerability (CVE-2025-1997) in the Web UI. Affected versions include UCD 7.0–7.0.5.25, 7.1–7.1.2.21, 7.2–7.2.3.14, 7.3–7.3.2.0, and DevOps Deploy 8.0–8.0.1.4 and 8.1–8.1. The issue may allow embedding arbitrary HTML tags...

5.4CVSS6AI score0.00282EPSS
SaveExploits0References1Affected Software2
RedhatCVE
RedhatCVE
•added 2025/03/27 5:08 a.m.•24 views

CVE-2024-45483

A Missing Authentication for Critical Function vulnerability in the GRUB configuration used B APROL 4.4-01 may allow an unauthenticated physical attacker to alter the boot configuration of the operating system...

7CVSS7.1AI score0.00232EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•24 views

PT-2025-13204 · Ibm · Ibm Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 7.1 through 7.1.2.22 IBM UrbanCode Deploy versions 7.2 through 7.2.3.15 IBM UrbanCode Deploy versions 7.3 through 7.3.2.10 IBM DevOps Deploy versions 8.0 through 8.0.1.5 IBM DevOps Deploy versions 8.1 through...

6.3CVSS7.1AI score0.00257EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/27 12:00 a.m.•25 views

PT-2025-13207 · Ibm · Ibm Urbancode Deploy +1

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy versions 7.0 through 7.0.5.25 IBM UrbanCode Deploy versions 7.1 through 7.1.2.21 IBM UrbanCode Deploy versions 7.2 through 7.2.3.14 IBM UrbanCode Deploy versions 7.3 through 7.3.2.0 IBM DevOps Deploy versions 8.0 through...

5.4CVSS7.1AI score0.00282EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•2 views

CVE-2024-45356: Missing Authentication for Critical Function

A unauthorized access vulnerability exists in the Xiaomi phone framework. The vulnerability is caused by improper validation and can be exploited by attackers to Access sensitive methods...

7.3CVSS5.9AI score0.00155EPSS
SaveExploits0References1
Rows per page
Query Builder