Oracle WebCenter Content Full Control

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...

Oracle WebCenter Content Full Control

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network protocol...

Oracle WebCenter Enterprise Capture Client Bundle Full Control

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

Vulnerabilities in Adobe Experience Manager

Adobe has identified several vulnerabilities in Adobe Experience Manager. These vulnerabilities include an absence of authentication at a critical function, allowing unauthorized actions to occur without user interaction. Additionally, there is a Server-Side Request Forgery SSRF vulnerability tha...

Large Scale VPN PAN-OS Disclosure

The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

Oracle Identity Manager Connector DoS

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

Oracle Enterprise Manager Event Management Data Compromise

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and...

Oracle WebCenter Enterprise Capture Client Bundle Data Compromise

The vulnerability of the Client Bundle component in the Oracle WebCenter Enterprise Capture software suite is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Oracle Identity Manager Legacy UI Data Compromise

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-56242

Capgo before 12.128.2 contains an unauthenticated security definer RPC function getidentityapikeyonly that returns the owning userid for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys t...

Universal Import Module Authentication Bypass

The vulnerability of the “Universal Import” module is related to the lack of authentication for the critical function. Exploiting this vulnerability allows a remote attacker to perform operations through the administrative interface...

BlueBubbles Plugin Bypass

The vulnerability of the BlueBubbles plugin for the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

MSTeams Plugin Data Compromise

The vulnerability of the MSTeams plugin for the instant messaging application Mattermost is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

Kapsch TrafficCom RIS-9260 Authentication Bypass

The vulnerability of the Kapsch TrafficCom RIS-9260 road communication module’s microprogramming software is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and...

Marketing Administration Component Full Control

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, involves a lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application...

Kerio Control upgrade.sh Privilege Escalation

The vulnerability of the upgrade.sh component of the Kerio Control networking software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to increase their privileges...

Mitsubishi Electric MELSEC iQ-F Series CPU Access Control Error Vulnerability

The Mitsubishi Electric MELSEC iQ-F Series CPUs are a series of CPU modules from Mitsubishi Electric Corporation Mitsubishi Electric, Japan. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs, which stems from a lack of authentication of a critical...

CVE-2025-46409

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier. If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker...

Confluence Mattermost Plugin Privilege Escalation

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...

GitLab Critical Function Authentication Bypass File Upload

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending a specially crafted request...