Lucene search
+L

3341 matches found

ATTACKERKB
ATTACKERKB
added 2024/09/18 12:15 p.m.7 views

CVE-2024-6406

Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobile Library Application allows Retrieve Embedded Sensitive Data. This issue affects Mobile Library Application: before 5.0...

8.5CVSS5.8AI score0.00384EPSS
SaveExploits0References3
VulnCheck KEV
VulnCheck KEV
added 2024/09/13 12:0 a.m.5 views

VulnCheck KEV: CVE-2023-28461

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway...

9.8CVSS7.4AI score0.67856EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/11 12:0 a.m.11 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to bypass security restrictions.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions from a remote location...

4.3CVSS5.5AI score0.00385EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2024/09/10 9:15 p.m.5 views

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network...

8.6CVSS7.3AI score0.01817EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/10 8:54 p.m.34 views

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network...

5.8CVSS0.01817EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/10 8:54 p.m.64 views

CVE-2024-8321

CVE-2024-8321 affects Ivanti Endpoint Manager (EPM) and involves missing authentication in Network Isolation, enabling a remote unauthenticated attacker to isolate managed devices from the network. Public references cite the vulnerability as present in EPM before 2022 SU6 and/or the 2024 Septembe...

8.6CVSS7.4AI score0.01817EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/10 8:54 p.m.12 views

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network...

5.8CVSS7.3AI score0.01817EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/10 2:15 p.m.9 views

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

9.8CVSS5.8AI score0.00579EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/09/10 2:15 p.m.5 views

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

9.8CVSS5.7AI score0.00579EPSS
SaveExploits0References4
NVD
NVD
added 2024/09/10 2:15 p.m.19 views

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

9.8CVSS0.00579EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/09/10 12:0 a.m.9 views

PT-2024-12594 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions prior to 4.6 HF14 Description: The issue is related to Missing Authentication for a Critical Function. There is no information provided about the estimated number of potentially affected devices worldwide or...

9.8CVSS6.5AI score0.00579EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2024/09/10 12:0 a.m.12 views

Loftware Spectrum 安全漏洞

Loftware Spectrum is an enterprise label printing solution from Loftware, a comprehensive, cloud-based label printing platform for companies of all sizes. A security vulnerability exists in Loftware Spectrum prior to version 4.6 that stems from HF14 missing authentication for critical functions...

9.8CVSS6.9AI score0.00579EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/09/10 12:0 a.m.18 views

CVE-2023-37226

Loftware Spectrum before 4.6 HF14 has Missing Authentication for a Critical Function...

0.00579EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2024/09/09 2:15 p.m.6 views

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits0References4
OSV
OSV
added 2024/09/09 2:15 p.m.7 views

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/09 2:15 p.m.22 views

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

9.8CVSS0.00439EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/09 2:3 p.m.56 views

CVE-2024-7015

CVE-2024-7015 affects Profelis Informatics and Consulting’s PassBox prior to v1.2. The issue is described as missing authentication for critical functions, resulting in authentication abuse and potential unauthorized access to protected operations. Technical detail from PT-2024-38032 confirms aff...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/09 2:3 p.m.22 views

CVE-2024-7015 Improper Authentication in Profelis Informatics and Consulting's PassBOX

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...

7.1CVSS5.8AI score0.00439EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/09 3:15 a.m.5 views

CVE-2024-8584

Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in...

9.8CVSS5.8AI score0.00677EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/08 12:0 a.m.9 views

PT-2024-39120 · Learning Digital · Orca Hcm

Name of the Vulnerable Software and Affected Versions: Orca HCM from LEARNING DIGITAL affected versions not specified Description: The issue is related to a missing authentication vulnerability, allowing an unauthenticated remote attacker to exploit the functionality and create an account with...

9.8CVSS7.3AI score0.00677EPSS
SaveExploits0References16
Rows per page
Query Builder