Lucene search
+L

1153 matches found

Snyk
Snyk
•added 2026/01/07 11:57 p.m.•22 views

Missing Authentication for Critical Function

Overview wolfssl is a Python module that encapsulates wolfSSL's C SSL/TLS library. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to improper enforcement of client certificate requirements in the CERTREQUIRED process. An attacker can gain...

9.3CVSS5.8AI score0.00334EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/07 4:55 a.m.•11 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS6.4AI score0.01519EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/01/07 4:55 a.m.•8 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via improper path normalization in the whitelist logic. An attacker can gain unauthorized access to protected API endpoints by sending crafted requests that bypass authentication checks. This...

9.8CVSS6.4AI score0.01519EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/01/06 1:12 a.m.•251 views

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

Bash Command Examples Batch Scanning python teamcit...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits19
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•17 views

Vulnerability of microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo. This vulnerability is related to the absence of authentication for a critical function, allowing attackers to compromise the integrity of protected information.

The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...

6.5CVSS5.8AI score0.00238EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/06 12:00 a.m.•18 views

Vulnerability of microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPLUS LOGO! 24CE, SIPLUS LOGO! 24CEo, SIPLUS LOGO! 24RCE, SIPLUS LOGO! 24RCEo. This vulnerability is related to the absence of authentication for a critical function, allowing an intruder to trigger a service failure.

The vulnerability of the microprogrammed software for Siemens LOGO! 12/24RCE, LOGO! 12/24RCEo, LOGO! 230RCE, LOGO! 230RCEo, LOGO! 24CE, LOGO! 24CEo, LOGO! 24RCE, LOGO! 24RCEo, LOGO! 24RCE, LOGO! 24RCEo, SIPLUS LOGO! 12/24RCE, SIPLUS LOGO! 12/24RCEo, SIPLUS LOGO! 230RCE, SIPLUS LOGO! 230RCEo, SIPL...

7.6CVSS5.8AI score0.00219EPSS
SaveExploits0References2
NVD
NVD
•added 2026/01/05 3:15 p.m.•30 views

CVE-2025-15026

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS0.00419EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/05 2:31 p.m.•27 views

EUVD-2026-0848

Missing Authentication for Critical Function vulnerability in Centreon Infra Monitoring centreon-awie Awie import module allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Infra Monitoring: from 25.10.0 before 25.10.2, from 24.10.0 before 24.10.3, from 24.04.0...

9.8CVSS6.5AI score0.00419EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/05 2:31 p.m.•48 views

CVE-2025-15026

CVE-2025-15026 affects Centreon Infra Monitoring, specifically the centreon-awie (Awie import module). The root cause is a missing authentication check for a critical function, allowing access to functionality not properly constrained by ACLs. Affected versions are: 25.10.0–25.10.1 (before 25.10....

9.8CVSS8.1AI score0.00419EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/26 12:19 a.m.•26 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.4AI score0.00212EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/12/25 8:42 a.m.•215 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

cve...

10CVSS8AI score0.98786EPSS
SaveExploits39
EUVD
EUVD
•added 2025/12/25 6:30 a.m.•21 views

EUVD-2025-205373

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS6.9AI score0.00212EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/12/25 12:00 a.m.•9 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS6.1AI score0.00212EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/23 6:29 a.m.•26 views

CVE-2025-12049

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.2CVSS8.1AI score0.00321EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/22 5:16 a.m.•20 views

CVE-2025-12049

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.8CVSS0.00321EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/22 5:05 a.m.•25 views

EUVD-2025-204698

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.2CVSS6.5AI score0.00321EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/22 5:05 a.m.•36 views

CVE-2025-12049

CVE-2025-12049 affects Sharp Display Solutions Media Player MP-01. The connected documents identify a Missing Authentication for Critical Function (CWE-306) vulnerability that allows an attacker to access the device’s web interface without authentication, change settings or perform other operatio...

9.8CVSS8.1AI score0.00321EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/21 12:00 a.m.•5 views

CVE-2023-47232: Missing Authentication for Critical Function

Vulnerability in mojofywp WP Affiliate Disclosure wp-affiliate-disclosure.This issue affects WP Affiliate Disclosure: from n/a through 1.2.6...

4.3CVSS8.1AI score0.0023EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/19 12:00 a.m.•8 views

Siemens LOGO! 8 BM Devices Buffer Copy Without Checking Size of Input (CVE-2025-40815)

A vulnerability has been identified in - LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions - LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions - LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions - LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions - LOGO! 24CE 6ED1052-1CC08-0BA2 All versions - LOGO! 24CEo...

8.6CVSS6.7AI score0.0038EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/12/19 12:00 a.m.•14 views

Siemens LOGO! 8 BM Devices Buffer Copy Without Checking Size of Input (CVE-2025-40815)

A vulnerability has been identified in - LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions - LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions - LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions - LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions - LOGO! 24CE 6ED1052-1CC08-0BA2 All versions - LOGO! 24CEo...

8.6CVSS6.7AI score0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder