Lucene search
+L

6574 matches found

GithubExploit
GithubExploit
•added 2020/04/16 1:39 a.m.•13 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

PoC exploit for CVE-2020-3952, a remote code execution vulnerabi...

9.8CVSS8.5AI score0.90384EPSS
SaveExploits20
GithubExploit
GithubExploit
•added 2020/04/16 1:39 a.m.•10 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

This is a PoC exploit for CVE-2020-3952, a vulnerability in VMwa...

9.8CVSS8.1AI score0.90384EPSS
SaveExploits20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/16 12:00 a.m.•6 views

CVE-2020-7114: Missing Authentication for Critical Function

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in...

9.8CVSS8.1AI score0.01089EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2020/04/15 12:51 a.m.•53 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

It is an offensive tool for vulnerability scanning. The tool, na...

9.8CVSS6.9AI score0.90384EPSS
SaveExploits20
GithubExploit
GithubExploit
•added 2020/04/15 12:51 a.m.•33 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

It is an offensive tool for vulnerability assessment. This repos...

9.8CVSS6.5AI score0.90384EPSS
SaveExploits20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•5 views

CVE-2019-12524: Missing Authentication for Critical Function

An issue was discovered in Squid through 4.7. When handling requests from users, Squid checks its rules to see if the request should be denied. Squid by default comes with rules to block access to the Cache Manager, which serves detailed server information meant for the maintainer. This rule is...

9.8CVSS6.8AI score0.03862EPSS
SaveExploits0References2
NVD
NVD
•added 2020/04/14 7:15 p.m.•26 views

CVE-2020-6235

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

8.6CVSS8.8AI score0.01642EPSS
SaveExploits0References2
OSV
OSV
•added 2020/04/14 7:15 p.m.•10 views

CVE-2020-6235

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

8.6CVSS7.3AI score0.01642EPSS
SaveExploits0References2
Prion
Prion
•added 2020/04/14 7:15 p.m.•27 views

Authentication flaw

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

5CVSS8.7AI score0.01642EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2020/04/14 7:15 p.m.•11 views

CVE-2020-6235

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

8.6CVSS8.1AI score0.01642EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2020/04/14 6:36 p.m.•72 views

CVE-2020-6235

CVE-2020-6235 affects SAP Solution Manager (Diagnostics Agent) 7.2, where the Collector Simulator lacks authentication checks, causing Missing Authentication. Multiple sources (NVD, Red Hat, CNVD, CVE lists) describe this issue with network-facing exposure and potential high impact on confidentia...

8.6CVSS8.6AI score0.01642EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2020/04/14 5:15 p.m.•23 views

CVE-2019-16879

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...

9.8CVSS6.3AI score0.0137EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/14 5:15 p.m.•7 views

CVE-2019-16879

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...

9.8CVSS6.7AI score
SaveExploits0References1
Prion
Prion
•added 2020/04/14 5:15 p.m.•26 views

Design/Logic Flaw

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...

7.5CVSS6.3AI score0.0137EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/14 4:39 p.m.•78 views

CVE-2019-16879

The CVE-2019-16879 issue affects the Synergy Systems & Solutions HUSKY RTU 6049-E70 with firmware 5.0 and earlier. It is a Missing Authentication for Critical Function (CWE-306); the device does not require authentication for TELNET access, which could allow an attacker to change configurations o...

9.8CVSS6.2AI score0.0137EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/14 12:00 a.m.•4 views

CVE-2019-16879: Missing Authentication for Critical Function

The Synergy Systems & Solutions SSS HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical Function CWE-306 vulnerability. The affected product does not require authentication for TELNET access, which may allow an attacker to change configuration or...

9.8CVSS6.8AI score0.0137EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/14 12:00 a.m.•6 views

CVE-2020-6235: Missing Authentication for Critical Function

SAP Solution Manager Diagnostics Agent, version 7.2, does not perform the authentication check for the functionalities of the Collector Simulator, leading to Missing Authentication...

8.6CVSS7.8AI score0.01642EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/13 12:00 a.m.•6 views

CVE-2020-11673: Missing Authentication for Critical Function

An issue was discovered in the Responsive Poll through 1.3.4 for Wordpress. It allows an unauthenticated user to manipulate polls, e.g., delete, clone, or view a hidden poll. This is due to the usage of the callback wpajaxnopriv function in Includes/Total-Soft-Poll-Ajax.php for sensitive operatio...

9.8CVSS8.2AI score0.03525EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•15 views

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces allows a intruder to gain unauthorized access to protected information.

The vulnerability of Siemens SCALANCE X industrial switchboard web interfaces lies in the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

9CVSS7.6AI score0.01389EPSS
SaveExploits0References4Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/10 12:00 a.m.•3 views

CVE-2020-3952: Missing Authentication for Critical Function

Under certain conditions, vmdir that ships with VMware vCenter Server, as part of an embedded or external Platform Services Controller PSC, does not correctly implement access controls...

9.8CVSS8.1AI score0.90384EPSS
SaveExploits20References2
Rows per page
Query Builder