Lucene search
K

849 matches found

RedhatCVE
RedhatCVE
added 2025/12/26 12:19 a.m.6 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.4AI score0.00194EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/12/25 8:42 a.m.162 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

cve...

10CVSS8.3AI score0.97673EPSS
Exploits36
EUVD
EUVD
added 2025/12/25 6:30 a.m.2 views

EUVD-2025-205373

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS6.9AI score0.00194EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/25 12:0 a.m.2 views

CVE-2025-66377

Pexip Infinity before 39.0 has Missing Authentication for a Critical Function in a product-internal API, allowing an attacker who already has access to execute code on one node within a Pexip Infinity installation to impact the operation of other nodes within the installation...

7.5CVSS7.1AI score0.00194EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/23 6:29 a.m.4 views

CVE-2025-12049

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.2CVSS7AI score0.00286EPSS
Exploits0References1
NVD
NVD
added 2025/12/22 5:16 a.m.3 views

CVE-2025-12049

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.8CVSS0.00286EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/22 5:5 a.m.2 views

EUVD-2025-204698

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the...

9.2CVSS6.5AI score0.00286EPSS
Exploits0References2
CVE
CVE
added 2025/12/22 5:5 a.m.8 views

CVE-2025-12049

CVE-2025-12049 affects Sharp Display Solutions Media Player MP-01. The connected documents identify a Missing Authentication for Critical Function (CWE-306) vulnerability that allows an attacker to access the device’s web interface without authentication, change settings or perform other operatio...

9.8CVSS6.7AI score0.00286EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/12/19 12:0 a.m.2 views

Siemens LOGO! 8 BM Devices Buffer Copy Without Checking Size of Input (CVE-2025-40815)

A vulnerability has been identified in - LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions - LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions - LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions - LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions - LOGO! 24CE 6ED1052-1CC08-0BA2 All versions - LOGO! 24CEo...

8.6CVSS5.4AI score0.0031EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/12/19 12:0 a.m.4 views

Siemens LOGO! 8 BM Devices Buffer Copy Without Checking Size of Input (CVE-2025-40815)

A vulnerability has been identified in - LOGO! 12/24RCE 6ED1052-1MD08-0BA2 All versions - LOGO! 12/24RCEo 6ED1052-2MD08-0BA2 All versions - LOGO! 230RCE 6ED1052-1FB08-0BA2 All versions - LOGO! 230RCEo 6ED1052-2FB08-0BA2 All versions - LOGO! 24CE 6ED1052-1CC08-0BA2 All versions - LOGO! 24CEo...

8.6CVSS5.4AI score0.0031EPSS
Exploits0References3
Snyk
Snyk
added 2025/12/18 3:45 p.m.3 views

Missing Authentication for Critical Function

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /api/config endpoint. An attacker can access sensitive system configuration data by sending unauthenticated GET requests to this endpoint. Remediation Ther...

8.7CVSS5.6AI score0.00548EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2025/12/10 4:49 a.m.143 views

Exploit for Missing Authentication for Critical Function in Langflow

Langflow RCE Exploit - CVE-2025-3248 ⚠️ Disclaimer...

9.8CVSS10AI score0.99959EPSS
Exploits33
NVD
NVD
added 2025/12/09 6:15 p.m.2 views

CVE-2025-59516

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS0.02125EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/09 5:55 p.m.3 views

EUVD-2025-202233

Missing authentication for critical function in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

7.8CVSS6.6AI score0.02125EPSS
Exploits0References2
EUVD
EUVD
added 2025/12/04 3:13 p.m.3 views

EUVD-2025-201167

Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows local users to execute arbitrary code via unspecified vectors...

7.8CVSS7.2AI score0.00168EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/03 5:0 p.m.3 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

10CVSS6.5AI score0.00279EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/03 5:0 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

10CVSS6.9AI score0.00279EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/03 5:0 p.m.1 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

10CVSS6.9AI score0.00279EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/03 5:0 p.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

10CVSS6.9AI score0.00279EPSS
Exploits0References2
Snyk
Snyk
added 2025/12/03 5:0 p.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the deployments configured with ACME and SCEP provisioners. An attacker can gain unauthorized access to sensitive resources by bypassing authorization controls. Remediation Upgrade...

10CVSS6.9AI score0.00279EPSS
Exploits0References2
Rows per page
Query Builder