Lucene search
K

2891 matches found

NVD
NVD
added 2026/04/09 10:16 p.m.3 views

CVE-2026-33788

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS0.00018EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:27 p.m.1 views

CVE-2026-33788

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS5.9AI score0.00018EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/09 9:27 p.m.14 views

CVE-2026-33788 Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators FPCs of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges...

8.5CVSS0.00018EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/09 8:4 p.m.20 views

CVE-2026-4436 GPL Odorizers GPL750 Missing Authentication for Critical Function

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line...

8.6CVSS0.00069EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/09 8:4 p.m.3 views

CVE-2026-4436 GPL Odorizers GPL750 Missing Authentication for Critical Function

A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little odorant is injected into a gas line...

8.6CVSS5.8AI score0.00069EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.2 views

PT-2026-31719

Name of the Vulnerable Software and Affected Versions versions not specified Description A remote attacker with low privileges can manipulate Modbus register values used in odorant injection logic, potentially causing over or under-injection of odorant into a gas line. Attackers have exploited th...

8.6CVSS5.8AI score0.00069EPSS
Exploits0References9
Snyk
Snyk
added 2026/04/08 9:50 p.m.1 views

Missing Authentication for Critical Function

Overview marimo is an A library for making reactive notebooks and apps Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the terminal/ws WebSocket endpoint, which lacks authentication validation. An unauthenticated attacker can gain unauthorized...

9.8CVSS7.6AI score0.8071EPSS
Exploits11References2
NVD
NVD
added 2026/04/08 7:24 p.m.2 views

CVE-2025-30650

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS0.00023EPSS
Exploits0References2
Snyk
Snyk
added 2026/04/08 7:21 p.m.1 views

Missing Authentication for Critical Function

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

8.7CVSS5.8AI score0.00019EPSS
Exploits0References2
Snyk
Snyk
added 2026/04/08 7:15 p.m.1 views

Missing Authentication for Critical Function

Overview ci4-cms-erp/ci4ms is a composer create-project ci4-cms-erp/ci4ms Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the install route guard process when the database is temporarily unreachable and the cache is empty. An attacker can gain...

9.2CVSS5.9AI score0.00053EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/08 5:26 p.m.1 views

CVE-2025-30650

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS5.8AI score0.00023EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/04/08 5:26 p.m.12 views

CVE-2025-30650

CVE-2025-30650 concerns Junos OS on Linux-based line cards. A Missing Authentication for Critical Function in command processing allows a privileged local user to gain root access to the Linux-based FPC. Affected line cards include: MPC7–MPC11; LC2101/LC2103; LC480/LC4800/LC9600; MX304 (built-in ...

8.4CVSS5.8AI score0.00023EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 5:26 p.m.2 views

CVE-2025-30650 Junos OS: Privileged local user can gain access to a Linux-based FPC as root

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line cards includ...

8.4CVSS5.8AI score0.00023EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/08 5:26 p.m.5 views

EUVD-2025-209320

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to line cards running Junos OS Evolved as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line...

8.4CVSS5.9AI score0.00023EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/04/08 12:4 p.m.14 views

CVE-2026-5300 Missing Authentication for Critical Function in coolercontrold

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

5.9CVSS0.00023EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/08 12:4 p.m.0 views

CVE-2026-5300 Missing Authentication for Critical Function in coolercontrold

Unauthenticated functionality in CoolerControl/coolercontrold 4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requests...

5.9CVSS5.9AI score0.00023EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/08 12:0 a.m.4 views

PT-2026-31369

A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to line cards running Junos OS Evolved as root. This issue affects systems running Junos OS using Linux-based line cards. Affected line...

8.4CVSS5.9AI score0.00023EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.3 views

PT-2026-30937

megagao production ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality. The insert method in UserController.java lacks authentication checks, allowing unauthenticated attackers to create super administrator accounts by directly accessing the /user/insert...

5.9AI score0.00058EPSS
Exploits0References2
CVE
CVE
added 2026/04/06 6:15 p.m.7 views

CVE-2026-5676

The vulnerability CVE-2026-5676 affects Totolink A8000R (firmware 5.9c.681_B20180413). The issue is in the CGI endpoint /cgi-bin/cstecgi.cgi, specifically the setLanguageCfg function where manipulating the langType argument leads to missing authentication. This enables a remote attacker to levera...

7.5CVSS6.8AI score0.00132EPSS
Exploits0References5
Snyk
Snyk
added 2026/04/06 6:3 p.m.2 views

Missing Authentication for Critical Function

Overview vite-plus is a The Unified Toolchain for the Web Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the fetchModule method exposed through the WebSocket interface when the server is explicitly exposed to the network and WebSocket is...

8.2CVSS5.9AI score0.05706EPSS
Exploits3References2
Rows per page
Query Builder