Lucene search
K

864 matches found

OSV
OSV
added 2026/01/13 6:16 p.m.4 views

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

7.2CVSS5.8AI score0.01242EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/13 5:56 p.m.9 views

CVE-2026-20803

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

7.2CVSS5.8AI score0.01242EPSS
Exploits0References2Affected Software3
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.7 views

PT-2026-2656

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description A missing authentication check for a critical function in Microsoft SQL Server can allow an authorized attacker to elevate privileges over a network. The issue, caused by missing...

9CVSS7AI score0.01242EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2026/01/09 11:22 a.m.9 views

CVE-2021-22316

There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device's data security and functional availability...

6.8CVSS6.8AI score0.00185EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:20 a.m.7 views

CVE-2021-33882

A Missing Authentication for Critical Function vulnerability in B. Braun SpaceCom2 prior to 012U000062 allows a remote attacker to reconfigure the device from an unknown source because of lack of authentication on proprietary networking commands...

8.6CVSS7.2AI score0.011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:13 a.m.13 views

CVE-2022-42473

A missing authentication for a critical function vulnerability in Fortinet FortiSOAR 6.4.0 - 6.4.4 and 7.0.0 - 7.0.3 and 7.2.0 allows an attacker to disclose information via logging into the database using a privileged account without a password...

5.5CVSS6.7AI score0.00169EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:57 a.m.9 views

CVE-2023-4815

Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3...

8.8CVSS6.8AI score0.00682EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 8:42 a.m.12 views

CVE-2022-37680

An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...

7.5CVSS6.8AI score0.00744EPSS
Exploits0References1
Snyk
Snyk
added 2026/01/07 11:57 p.m.4 views

Missing Authentication for Critical Function

Overview wolfssl is a Python module that encapsulates wolfSSL's C SSL/TLS library. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to improper enforcement of client certificate requirements in the CERTREQUIRED process. An attacker can gain...

9.3CVSS6.8AI score0.00272EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/07 4:55 a.m.6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS7.1AI score0.00439EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/07 4:55 a.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS7.1AI score0.00439EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/01/06 1:12 a.m.205 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

Bash Command Examples Batch Scanning python teamcit...

9.8CVSS7.5AI score0.99979EPSS
Exploits17
NVD
NVD
added 2026/01/05 3:15 p.m.6 views

CVE-2025-15026

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS0.00373EPSS
Exploits0References2
CVE
CVE
added 2026/01/05 2:31 p.m.14 views

CVE-2025-15026

CVE-2025-15026 affects Centreon Infra Monitoring, specifically the centreon-awie (Awie import module). The root cause is a missing authentication check for a critical function, allowing access to functionality not properly constrained by ACLs. Affected versions are: 25.10.0–25.10.1 (before 25.10....

9.8CVSS6.6AI score0.00373EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2026/01/05 2:31 p.m.6 views

EUVD-2026-0848

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS6.5AI score0.00373EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/26 12:19 a.m.6 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.4AI score0.00194EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/12/25 8:42 a.m.170 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

cve...

10CVSS8.3AI score0.97673EPSS
Exploits36
EUVD
EUVD
added 2025/12/25 6:30 a.m.2 views

EUVD-2025-205373

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS6.9AI score0.00194EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/25 12:0 a.m.3 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.1AI score0.00194EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 6:29 a.m.5 views

CVE-2025-12049

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.2CVSS7AI score0.00286EPSS
Exploits0References1
Rows per page
Query Builder