CGA-3P6F-M863-C758

Bulletin has no description...

CVE-2025-49596: Missing Authentication for Critical Function

The MCP inspector is a developer tool for testing and debugging MCP servers. Versions of MCP Inspector below 0.14.1 are vulnerable to remote code execution due to lack of authentication between the Inspector client and proxy, allowing unauthenticated requests to launch MCP commands over stdio...

Drupal Bookable Calendar security vulnerability

Drupal Bookable Calendar is a calendar plugin for the Drupal community. A security vulnerability exists in Drupal Bookable Calendar versions prior to 2.2.13, which stems from a lack of authorization and may result in forced browsing...

CVE-2025-5996

An issue has been discovered in GitLab CE/EE affecting all versions from 2.1.0 before 17.10.8, 17.11 before 17.11.4, and 18.0 before 18.0.2. A lack of input validation in HTTP responses could allow an authenticated user to cause denial of service...

Drupal Quick Node Block security vulnerability

Drupal Quick Node Block is a Drupal plugin for the Drupal community. A security vulnerability exists in Drupal Quick Node Block versions prior to 2.0.0, which stems from a lack of authorization and could lead to forced browsing...

CGA-GQQX-83Q4-R6GR

Bulletin has no description...

CGA-47CW-8QRJ-8M4R

Bulletin has no description...

CVE-2025-5876 Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication

A vulnerability classified as problematic was found in Lucky LM-520-SC, LM-520-FSC and LM-520-FSC-SAM up to 20250321. Affected by this vulnerability is an unknown functionality. The manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed t...

CGA-679Q-PC95-XGM4

Bulletin has no description...

Telnet Protocol Unauthenticated Access

The vulnerability of the Telnet protocol implementation in Quantenna’s microprogrammable Wi-Fi chips lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device...

Desigo CC Auth Bypass RCE

The vulnerability of the Desigo CC software platform is related to the absence of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted network requests...

Honding Technology Smart Parking Management System security vulnerabilities

Honding Technology Smart Parking Management System is a smart parking management system from Honding Technology. A security vulnerability exists in the Honding Technology Smart Parking Management System that stems from a lack of authorization and could lead to the creation of an administrator...

Lucky’s various products have security vulnerabilities

Lucky LM-520-SC and others are a smart security lock from Lucky. A security vulnerability exists in various Lucky products that stems from a lack of authentication. The following products and versions are affected: the Lucky LM-520-SC, LM-520-FSC, and LM-520-FSC-SAM 20250321 and prior versions...

Lablup BackendAI security vulnerabilities

Lablup BackendAI is a machine learning platform from Lablup Korea. A security vulnerability exists in Lablup BackendAI that stems from a lack of authorization and could lead to session hijacking and data leakage...

CGA-P5W8-H2GX-X794

Bulletin has no description...

WordPress plugin Raychat has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin Verge3D has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress plugin WP Compress for MainWP has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Plugin 6Storage Rentals has a security vulnerability

WordPress 6Storage Rentals plugin is an easy to use plugin that allows tenants to book the desired storage facility on your website. WordPress 6Storage Rentals plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no details of the vulnerability are...

WordPress plugin onOffice for WP-Websites has security vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...