Lucene search
K

853 matches found

Cvelist
Cvelist
added 2026/03/26 8:3 p.m.18 views

CVE-2026-3527 AJAX Dashboard - Critical - Access bypass - SA-CONTRIB-2026-022

Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAX Dashboard: from 0.0.0 before 3.1.0...

0.00243EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:5 p.m.2 views

CVE-2025-13779

Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1...

8.3CVSS5.8AI score0.00285EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:3 p.m.2 views

CVE-2026-23662

Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

7.5CVSS5.8AI score0.00724EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 2:59 p.m.3 views

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/03/24 7:18 p.m.184 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 Exploit to MCP...

9.8CVSS6AI score0.36126EPSS
Exploits29
NVD
NVD
added 2026/03/24 7:16 p.m.3 views

CVE-2026-2417

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS0.00573EPSS
Exploits0References1
CVE
CVE
added 2026/03/24 6:6 p.m.6 views

CVE-2026-2417

The CVE-2026-2417 entry concerns Pharos Controls Mosaic Show Controller firmware 2.15.3, describing a Missing Authentication for Critical Function that could let an unauthenticated attacker bypass authentication and run arbitrary commands with root privileges. The vulnerability is rated CRITICAL ...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/24 6:6 p.m.17 views

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS0.00573EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/24 6:6 p.m.5 views

CVE-2026-2417 Missing Authentication for Critical Function in Pharos Controls Mosaic Show Controller

A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/24 12:0 a.m.3 views

PT-2026-27478

Name of the Vulnerable Software and Affected Versions Pharos Controls Mosaic Show Controller version 2.15.3 Description A missing authentication check for a critical function allows an unauthenticated attacker to bypass authentication and execute arbitrary commands with root privileges. This...

9.3CVSS6.1AI score0.00573EPSS
Exploits0References4
GithubExploit
GithubExploit
added 2026/03/21 10:33 p.m.195 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 - MCPJam insp...

9.8CVSS6AI score0.36126EPSS
Exploits29
EUVD
EUVD
added 2026/03/20 6:31 p.m.2 views

EUVD-2026-13718

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later...

9.3CVSS5.9AI score0.00683EPSS
Exploits0References2
NVD
NVD
added 2026/03/20 5:16 p.m.4 views

CVE-2026-22898

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later...

9.8CVSS0.00683EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/20 4:21 p.m.1 views

CVE-2026-22898 QVR Pro

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later...

9.3CVSS5.9AI score0.00683EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/20 4:21 p.m.23 views

CVE-2026-22898 QVR Pro

A missing authentication for critical function vulnerability has been reported to affect QVR Pro. The remote attackers can then exploit the vulnerability to gain access to the system. We have already fixed the vulnerability in the following version: QVR Pro 2.7.4.14 and later...

9.3CVSS0.00683EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/20 12:0 a.m.5 views

PT-2026-26639

Name of the Vulnerable Software and Affected Versions QVR Pro versions prior to 2.7.4.14 Description QVR Pro is affected by a missing authentication check for critical functions, allowing remote attackers to gain access to the system. The issue allows attackers to bypass authentication and access...

9.8CVSS7.5AI score0.00683EPSS
Exploits0References10
Snyk
Snyk
added 2026/03/19 9:32 p.m.2 views

Missing Authentication for Critical Function

Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Missing Authentication for Critical Function due to the improper validation of third-party auth provider's credentials. An...

9.1CVSS5.8AI score0.00455EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/19 12:46 p.m.2 views

Missing Authentication for Critical Function

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the decryptMessage.json.php endpoint, which processes user-supplied private keys, encrypted messages, and...

7.1CVSS5.8AI score
Exploits0References2
Snyk
Snyk
added 2026/03/19 12:42 p.m.1 views

Missing Authentication for Critical Function

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in WordNet Browser HTTP server in default configuration. An attacker can cause the service to...

8.2CVSS5.8AI score0.00542EPSS
Exploits1References2
Snyk
Snyk
added 2026/03/18 8:11 p.m.1 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function through the WebSocket message handler in kernel/server/serve.go. An attacker can crash the kernel process and disrupt service availability by sending malformed JSON over an unauthenticated...

8.7CVSS6.4AI score0.00497EPSS
Exploits1References3
Rows per page
Query Builder