Adobe Experience Manager XSS

The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Adobe Experience Manager XSS

The vulnerability of the Adobe Media Encoder application relates to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using the DOM...

PT-2026-60675

Summary Nuclio Dashboard exposes POST /api/functions without authentication by default NOP auth mode. The spec.handler field e.g., mymodule:myfunction is parsed by functionconfig.ParseHandler which splits on : only — no path validation is applied to the module portion. During function build,...

CVE-2026-56300 Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

Capgo before 12.128.2 contains unauthenticated security definer RPC functions getuserid and getorgpermforapikey that expose API key validity oracles and user UUID disclosure. Unauthenticated attackers using the public API key can validate leaked keys, enumerate users and apps, and determine...

Buffalo Wi-Fi router access control vulnerability

The BUFFALO Wi-Fi router is a series of routers developed by the Japanese company BUFFALO. The BUFFALO Wi-Fi router has an access control vulnerability, which stems from the lack of authentication for key functions. This vulnerability could allow attackers to forcibly restart the product without...

Microchip TimePictra security vulnerability

Microchip TimePictra is a synchronization network management software developed by the American company Microchip. Versions of Microchip TimePictra 11.3 SP2 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the lack of authentication for critical functions, which...

TÜBİTAK BİLGEM Liderahenk: Access control error vulnerability

TÜBİTAK BİLGEM Liderahenk is a central management system of the Turkish company TÜBİTAK BİLGEM. Versions 3.3.1 and earlier, including 3.5.0, had access control vulnerabilities due to the lack of authentication for key functions, which could lead to remote code execution...

Universal FlexCity/Kiosk Access Control Vulnerability

Universal FlexCity/Kiosk is a smart city self-service terminal system developed by the Turkish company Universal. Versions of Universal FlexCity/Kiosk prior to 1.0.36 contained an access control vulnerability. This vulnerability stemmed from privileged definitions that included insecure operation...

Mitsubishi Electric Air Conditioning Authentication Bypass

The vulnerability of Mitsubishi Electric’s air conditioning system lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to remotely control the air conditioning system...

Quest KACE Systems Management Appliance Authentication Failure DoS

The vulnerability of the Quest KACE Systems Management Appliance SMA tool for comprehensive network device management is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Sharp Media Player MP-01 has a security vulnerability

Sharp Media Player MP-01 is a commercial digital signage media player from Sharp Japan. A security vulnerability exists in Sharp Media Player MP-01, which stems from a lack of authentication for critical functions, and could lead to unauthorized access to the web interface and the ability to chan...

Oracle Financial Services Analytical Applications Infrastructure Full Control

The vulnerability of the Platform component for analytics and data management in Oracle Financial Services Analytical Applications Infrastructure relates to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to gain full control over the...

AOMEI Cyber Backup Access Control Vulnerability

AOMEI Cyber Backup is a backup and restore software from China-based AOMEI Technology AOMEI. An access control error vulnerability exists in AOMEI Cyber Backup that stems from a lack of authentication for critical functions, which could lead to remote code execution...

StateRepository service Windows Privilege Escalation

The vulnerability of the StateRepository service in the Windows operating system is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...

CommuniGate Pro Authentication Bypass

The vulnerability of the CommuniGate Pro mail server lies in the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to send emails with arbitrary content to any email address...

Drupal Config Pages Viewer security vulnerability

Drupal Config Pages Viewer is a configuration viewer for the Drupal community. A security vulnerability exists in Drupal Config Pages Viewer versions prior to 1.0.4, which stems from a lack of authentication for critical functions and could lead to improper access control...

Hammock AssetView Access Control Vulnerability

Hammock AssetView is an IT asset management tool and information asset management software from Hammock Japan. An access control error vulnerability exists in Hammock AssetView that stems from a lack of authentication for critical functions, which could result in files being accessed or deleted...

Microsoft Azure PolicyWatch access control vulnerability

Microsoft Azure PolicyWatch is an application from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure PolicyWatch that stems from a lack of authentication for critical functions, allowing an unauthorized attacker to elevate privileges through the network...