1153 matches found
CVE-2025-7405
Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU module allows a remote unauthenticated attacker to read or write the device values of the product and stop the operation of the programs, since MODBUS/TCP in the products does not...
Mitsubishi Electric MELSEC iQ-F Series CPU 访问控制错误漏洞
The Mitsubishi Electric MELSEC iQ-F Series CPUs are a series of CPU modules from Mitsubishi Electric Corporation Mitsubishi Electric, Japan. An access control error vulnerability exists in the Mitsubishi Electric MELSEC iQ-F Series CPUs, which stems from a lack of authentication of a critical...
CVE-2025-54942
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication...
CVE-2025-54942 SUNNET Corporate Training Management System - Missing Authentication for Critical Function
A missing authentication for critical function vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to access deployment functionality without prior authentication...
PT-2025-35336
Name of the Vulnerable Software and Affected Versions SUNNET Corporate Training Management System versions prior to 10.11 Description A missing authentication check for a critical function allows remote attackers to access deployment functionality without authentication. Recommendations Update to...
The vulnerability of the microprogramming software of the CyberData 011209 SIP Emergency Intercom, related to the lack of authentication for a critical function, allows attackers to trigger a service failure.
The vulnerability of the Microprogrammed Software of the CyberData 011209 SIP Emergency Intercom relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failure...
The vulnerability of the CE Phoenix e-commerce software (CE PhoenixCart) lies in the lack of authentication for a critical function, allowing attackers to compromise the accessibility of protected information.
The vulnerability of the CE Phoenix e-commerce software CE PhoenixCart is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...
CVE-2025-8611
AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific fla...
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the POST /api/v4/teams/:teamId/restore endpoint. An attacker can access sensitive team invite information by sending crafted requests to this endpoint without proper privileges. Remediati...
CVE-2025-27214
The UniFi Connect EV Station Pro (versions 1.5.18 and earlier ) is vulnerable to a Missing Authentication for Critical Function (CWE-306) security flaw. A malicious actor with physical or adjacent access can exploit this lack of authentication to perform an unauthorized factory reset . To remedia...
CVE-2025-27214
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier Mitigation: Update Uni...
CVE-2025-27214
A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious actor with physical or adjacent access to perform an unauthorized factory reset. Affected Products: UniFi Connect EV Station Pro Version 1.5.18 and earlier Mitigation: Update Uni...
GO-2025-3865 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...
GO-2025-3875 Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence
Mattermost Confluence Plugin is Missing Authentication for Critical Function in github.com/mattermost/mattermost-plugin-confluence...
CVE-2025-8754
Missing Authentication for Critical Function vulnerability in ABB ABB AbilityTM zenon.This issue affects ABB AbilityTM zenon: from 7.50 through 14...
The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to the lack of authentication for a critical function, allows a hacker to gain read-only and edit access to data.
The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain read and edit access to data...
The vulnerability of the Confluence plugin for the instant messaging application Mattermost, related to the lack of authentication for a critical function, allows attackers to escalate their privileges.
The vulnerability of the Confluence plugin for the instant messaging application Mattermost relates to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker who operates remotely to increase their privileges...
CVE-2025-7677
A denial-of-service DoS attack is possible if access to the local network is provided to unauthorized users. This is due to a buffer copy issue that may lead to a software crash. This issue affects all versions of ASPECT...