The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network...

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to gain full control over the application.

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application using the HTTP network protocol...

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents allows a intruder to gain full control over the system.

The vulnerability of the Client Bundle component of the Oracle WebCenter Enterprise Capture software platform for automatic scanning, recognition, and digitization of documents is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker...

Vulnerabilities in Adobe Experience Manager

Adobe has identified several vulnerabilities in Adobe Experience Manager. These vulnerabilities include an absence of authentication at a critical function, allowing unauthorized actions to occur without user interaction. Additionally, there is a Server-Side Request Forgery SSRF vulnerability tha...

The vulnerability of the Large Scale VPN (LSVPN) module of the PAN-OS operating system, which allows a intruder to disclose protected information

The vulnerability of the Large Scale VPN LSVPN module of the PAN-OS operating system is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms remotely...

The vulnerability of the Core component of the Oracle Identity Manager Connector, which allows a perpetrator to trigger a service failure

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and...

The vulnerability of the Client Bundle component in the Oracle WebCenter Enterprise Capture software suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Client Bundle component in the Oracle WebCenter Enterprise Capture software suite is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the OIM Legacy UI component of the Oracle Identity Manager is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-56242

Capgo before 12.128.2 contains an unauthenticated security definer RPC function getidentityapikeyonly that returns the owning userid for supplied API keys, creating an API key validity oracle and user identity disclosure primitive. Attackers can call this endpoint with valid or invalid API keys t...

The vulnerability of the BlueBubbles plugin for the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a hacker to bypass existing security mechanisms.

The vulnerability of the BlueBubbles plugin for the AI agent OpenClaw previously known as ClawdBot or MoltBot is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the MSTeams plugin for the instant messaging application Mattermost allows a hacker to compromise the integrity and accessibility of protected information.

The vulnerability of the MSTeams plugin for the instant messaging application Mattermost is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of protected information...

The vulnerability of the Kapsch TrafficCom RIS-9260 road communication module lies in the lack of authentication for a critical function, allowing a violator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Kapsch TrafficCom RIS-9260 road communication module’s microprogramming software is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to compromise the confidentiality, integrity, and...

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to gain full control over the application. This component is part of the Oracle E-Business Suite, which serves as a system for automating business operations.

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform, a part of the Oracle E-Business Suite, involves a lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to gain full control over the application...

The vulnerability of the upgrade.sh component of the Kerio Control networking firewall software allows a hacker to increase their privileges.

The vulnerability of the upgrade.sh component of the Kerio Control networking software lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to increase their privileges...

Mitsubishi Electric MELSEC iQ-F Series CPU 访问控制错误漏洞

The Mitsubishi Electric MELSEC iQ-F Series CPUs are a series of CPU modules from Mitsubishi Electric Corporation Mitsubishi Electric, Japan. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs, which stems from a lack of authentication of a critical...

CVE-2025-46409

Inadequate encryption strength issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier. If this vulnerability is exploited, a function that requires authentication may be accessed by a remote unauthenticated attacker...

The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to the lack of authentication for a critical function, allows attackers to escalate their privileges.

The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from the lack of authentication for a critical function, allowing attackers to upload arbitrary files.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to upload arbitrary files by sending a specially crafted request...

The vulnerability of the IBM Storage Protect (formerly IBM Spectrum Protect) software platform’s server allows a hacker to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the IBM Storage Protect formerly IBM Spectrum Protect software platform’s server lies in the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...