Lucene search
+L

7008 matches found

Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•6 views

PT-2026-98290

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...

8.5CVSS6.1AI score0.00265EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•11 views

CVE-2026-93354: Initialization of a Resource with an Insecure Default

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...

8.5CVSS6.1AI score0.00265EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-88956: Missing Authentication for Critical Function

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

7CVSS5.9AI score0.00218EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•13 views

CVE-2026-84403: Missing Authentication for Critical Function

The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device...

6.9CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•6 views

CVE-2026-81455: Missing Authentication for Critical Function

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/23 4:16 p.m.•25 views

CVE-2026-19267

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS0.00125EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 4:16 p.m.•26 views

CVE-2026-18185

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function...

7.3CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 3:49 p.m.•20 views

CVE-2026-19267 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 3:49 p.m.•19 views

EUVD-2026-85358

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 3:49 p.m.•60 views

CVE-2026-19267 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS0.00125EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 3:49 p.m.•35 views

CVE-2026-19267

IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 - 4.0.10.0 are vulnerable to a missing authentication flaw on the Business Rules Manager commands REST endpoint (CommandsResource.java:31). This security weakness, categorized as CWE-306 , allows a local actor to invoke...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/23 3:44 p.m.•49 views

CVE-2026-18185 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function...

7.3CVSS0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 3:44 p.m.•18 views

CVE-2026-18185 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function...

7.3CVSS6AI score0.00263EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 3:44 p.m.•28 views

CVE-2026-18185

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18185 , which stems from missing authentication for a critical function (CWE-306). A remote attacker could exploit this flaw to access sensitive information and modify system configurations . The vulnerability im...

7.3CVSS6AI score0.00263EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/09/23 3:17 p.m.•15 views

CVE-2026-73588

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

7.4CVSS0.00246EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 2:24 p.m.•17 views

CVE-2026-73588

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

7.4CVSS5.9AI score0.00246EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 2:24 p.m.•24 views

CVE-2026-73588

Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is susceptible to a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access can exploit this flaw to gain unauthorized access . Remediation is available via the sec...

7.4CVSS5.9AI score0.00246EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/23 2:24 p.m.•45 views

CVE-2026-73588

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

7.4CVSS0.00246EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 2:24 p.m.•15 views

EUVD-2026-85333

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

7.4CVSS5.9AI score0.00246EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/23 12:52 p.m.•27 views

EUVD-2026-85287

A missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions. Additional authentication factors still apply...

7.4CVSS6AI score0.00375EPSS
SaveExploits0References1
Rows per page
Query Builder