Lucene search
+L

1155 matches found

attackerkb
attackerkb
•added 2026/04/08 5:26 p.m.•10 views

CVE-2025-30650

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS5.8AI score0.00137EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2026/04/08 5:26 p.m.•33 views

EUVD-2025-209320

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to line cards running Junos OS Evolved as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line...

8.4CVSS5.9AI score0.00137EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/08 5:26 p.m.•83 views

CVE-2025-30650

CVE-2025-30650 concerns Junos OS on Linux-based line cards. A Missing Authentication for Critical Function in command processing allows a privileged local user to gain root access to the Linux-based FPC. Affected line cards include: MPC7–MPC11; LC2101/LC2103; LC480/LC4800/LC9600; MX304 (built-in ...

8.4CVSS5.8AI score0.00137EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/08 12:04 p.m.•5 views

CVE-2026-5300 Missing Authentication for Critical Function in coolercontrold

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

5.9CVSS5.8AI score0.0028EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/08 12:04 p.m.•36 views

CVE-2026-5300 Missing Authentication for Critical Function in coolercontrold

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

5.9CVSS0.0028EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/08 12:04 p.m.•51 views

CVE-2026-5300

CVE-2026-5300 affects CoolerControl/coolercontrold prior to version 4.0.0, where unauthenticated users can view and modify potentially sensitive data via HTTP requests. The issue impacts both confidentiality and integrity (CVSS v3.1 base scores: 9.1/CRITICAL under NVD, with NETWORK attack vector ...

9.1CVSS5.8AI score0.0028EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•10 views

CVE-2025-30650: Missing Authentication for Critical Function

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS5.8AI score0.00137EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•36 views

PT-2026-31369

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 22.4R3-S8 Juniper Networks Junos OS versions 23.2 before 23.2R2-S6 Juniper Networks Junos OS versions 23.4 before 23.4R2-S6 Juniper Networks Junos OS versions 24.2 before 24.2R2-S3 Juniper Networks...

8.4CVSS5.8AI score0.00137EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/04/06 6:03 p.m.•15 views

Missing Authentication for Critical Function

Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the fetchModule method exposed through the WebSocket interface when the server is explicitly exposed to the network and WebSocket is...

8.2CVSS5.6AI score0.02619EPSS
SaveExploits4References2
Snyk
Snyk
•added 2026/04/06 6:03 p.m.•17 views

Missing Authentication for Critical Function

Overview org.webjars.npm:vite is a Native-ESM powered web dev build tool Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the fetchModule method exposed through the WebSocket interface when the server is explicitly exposed to the network and...

8.2CVSS5.5AI score0.02619EPSS
SaveExploits4References2
Snyk
Snyk
•added 2026/04/06 8:09 a.m.•6 views

Missing Authentication for Critical Function

Overview gpt-researcher is a GPT Researcher is an autonomous agent designed for comprehensive web research on any task Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the HTTP REST API Endpoint and the WebSocket interface without any form of...

7.5CVSS7.2AI score0.00654EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/04 6:16 a.m.•10 views

Missing Authentication for Critical Function

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the check.ffmpeg.json.php endpoint, which lacks access control checks. An attacker can obtain information about th...

6.9CVSS5.9AI score0.00398EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/04/04 4:59 a.m.•19 views

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00999EPSS
SaveExploits0References1
CVE
CVE
•added 2026/04/03 8:20 p.m.•51 views

CVE-2026-28766

CVE-2026-28766 refers to Gardyn Cloud API missing authentication for a critical function. The initial description and related documents confirm that a specific endpoint exposes all user account information for registered Gardyn users without requiring authentication, enabling potential confidenti...

9.3CVSS5.8AI score0.00604EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/03 8:20 p.m.•8 views

CVE-2026-28766 Gardyn Cloud API Missing Authentication for Critical Function

A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication...

9.3CVSS5.8AI score0.00604EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/04/03 8:18 p.m.•39 views

CVE-2026-28767 Gardyn Cloud API Missing Authentication for Critical Function

A specific administrative endpoint notifications is accessible without proper authentication...

6.9CVSS0.00535EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/04/03 6:31 p.m.•28 views

Missing Authentication for Critical Function

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the FastAPI...

9.8CVSS8.1AI score0.04392EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/04/03 12:31 a.m.•19 views

EUVD-2026-18560

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00999EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/03 12:16 a.m.•15 views

CVE-2026-32211

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS0.00999EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/04/02 2:00 p.m.•19 views

Azure MCP Server Information Disclosure Vulnerability

Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network...

9.1CVSS5.8AI score0.00999EPSS
SaveExploits0
Rows per page
Query Builder