Lucene search
K

864 matches found

OSV
OSV
added 2023/01/30 11:15 p.m.1 views

CVE-2022-32528

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory, potentially leading to a denial-of-service condition when an attacker sends specific messages. Affected Products: IGSS...

9.1CVSS5.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/20 9:23 p.m.11 views

CVE-2023-0052 SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol FTP are the only protocols available for device management, an unauthorized user could acce...

9.8CVSS7.3AI score0.0071EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/01/20 9:23 p.m.35 views

CVE-2023-0052 SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function

SAUTER Controls Nova 200–220 Series with firmware version 3.3-006 and prior and BACnetstac version 4.2.1 and prior allows the execution of commands without credentials. As Telnet and file transfer protocol FTP are the only protocols available for device management, an unauthorized user could acce...

9.8CVSS9.7AI score0.0071EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2023/01/17 2:58 p.m.568 views

Exploit for Missing Authentication for Critical Function in Linuxfoundation Harbor

CVE-2022-46463 CVE-2022-46463POChttps://nvd.nist.gov/vuln...

7.5CVSS7.6AI score0.06237EPSS
Exploits2
Cvelist
Cvelist
added 2023/01/15 7:58 p.m.15 views

CVE-2018-25075 karsany OBridge ProcedureDao.java getAllStandaloneProcedureAndFunction sql injection

A vulnerability classified as critical has been found in karsany OBridge up to 1.3. Affected is the function getAllStandaloneProcedureAndFunction of the file obridge-main/src/main/java/org/obridge/dao/ProcedureDao.java. The manipulation leads to sql injection. The complexity of an attack is rathe...

4.6CVSS10AI score0.0095EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/12/14 12:0 a.m.5 views

The vulnerability of the APC Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function, allowing attackers to gain access to the software.

The vulnerability of the APC Easy UPS Online Monitoring Software relates to the absence of authentication for a critical function. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the software...

10CVSS7.8AI score0.00712EPSS
Exploits0References4Affected Software2
NVD
NVD
added 2022/11/16 1:15 p.m.20 views

CVE-2022-4018

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS0.00809EPSS
Exploits1References2
Prion
Prion
added 2022/11/16 1:15 p.m.14 views

Authentication flaw

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

4.3CVSS4.6AI score0.00809EPSS
Exploits1References2Affected Software1
PyPA
PyPA
added 2022/11/16 1:15 p.m.6 views

PYSEC-2022-43001

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS6.8AI score0.00809EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2022/11/16 1:15 p.m.12 views

PYSEC-2022-43001

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS7AI score0.00809EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2022/11/16 12:0 a.m.4 views

CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS4.7AI score0.00809EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/11/16 12:0 a.m.2 views

PT-2022-25260 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a6 Description: The issue concerns a missing authentication mechanism for a critical function in the rdiffweb GitHub repository. Recommendations: For versions prior to 2.5.0a6, update to version 2.5.0a6 or late...

6.1CVSS5.3AI score0.00809EPSS
Exploits1References10
Cvelist
Cvelist
added 2022/11/16 12:0 a.m.24 views

CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS5AI score0.00809EPSS
Exploits1References2
OSV
OSV
added 2022/11/16 12:0 a.m.20 views

CVE-2022-4018 Missing Authentication for Critical Function in ikus060/rdiffweb

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

6.1CVSS5.5AI score0.00809EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/10/20 12:0 p.m.17 views

Rdiffweb is missing authentication for critical function

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS9AI score0.00749EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/10/20 12:0 p.m.13 views

GHSA-99J5-FVG3-54PM Rdiffweb is missing authentication for critical function

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0...

9.8CVSS9.5AI score0.00749EPSS
Exploits0References6
Prion
Prion
added 2022/10/20 12:15 a.m.11 views

Authentication flaw

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

7.5CVSS9.6AI score0.00749EPSS
Exploits0References2Affected Software1
PyPA
PyPA
added 2022/10/20 12:15 a.m.4 views

PYSEC-2022-42977

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

9.8CVSS6.8AI score0.00749EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/10/20 12:15 a.m.30 views

PYSEC-2022-42977

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

9.8CVSS2.3AI score0.00749EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/10/19 12:0 a.m.2 views

PT-2022-21760 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a6 Description: The issue concerns a missing authentication for a critical function in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0a6, update to version 2.5.0a6 or later ...

9.8CVSS5.1AI score0.00749EPSS
Exploits0References11
Rows per page
Query Builder