Lucene search
+L

6894 matches found

NVD
NVD
•added 2026/09/24 5:17 p.m.•10 views

CVE-2026-97231

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...

7.5CVSS0.00383EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/24 4:45 p.m.•11 views

EUVD-2026-86294

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...

7.5CVSS6.6AI score0.00383EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/09/24 4:45 p.m.•9 views

CVE-2026-97231 volotat Anagnorisis Socket.IO Connect app.py missing authentication

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...

7.5CVSS6.6AI score0.00383EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/24 4:45 p.m.•36 views

CVE-2026-97231 volotat Anagnorisis Socket.IO Connect app.py missing authentication

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...

7.5CVSS0.00383EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/24 4:45 p.m.•24 views

CVE-2026-97231

A vulnerability exists in volotat Anagnorisis versions up to 0.3.1/0.4.0 due to missing authentication in an unknown function within the app.py file of the Socket.IO Connect Interface component. An attacker can remotely exploit this flaw to bypass authentication. While the vendor was contacted, n...

7.5CVSS6.6AI score0.00383EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•7 views

PT-2026-98245

Name of the Vulnerable Software and Affected Versions Dell ThinOS 10 versions prior to SecurityAddon 2605.10.2766 T10 Description An issue exists where authentication is missing for a critical function. This allows an unauthenticated attacker with remote access to potentially gain unauthorized...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•5 views

PT-2026-98157

Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions 0.3.1 and 0.4.0 Description A flaw exists in the Socket.IO Connect Interface component within the app.py file. Remote manipulation of an unknown function in this file allows an attacker to bypass authentication...

7.5CVSS5.6AI score0.00383EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-84403: Missing Authentication for Critical Function

The Botslab G980H dash camera firmware does not require authenticated pairing or client binding before permitting access to Bluetooth Low Energy communications and GATT characteristics. An unauthenticated attacker within Bluetooth range could intercept or directly retrieve sensitive device...

6.9CVSS5.8AI score0.00122EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-88956: Missing Authentication for Critical Function

The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...

7CVSS5.9AI score0.00218EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•10 views

CVE-2026-93354: Initialization of a Resource with an Insecure Default

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...

8.5CVSS6.1AI score0.00265EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•5 views

CVE-2026-81455: Missing Authentication for Critical Function

Dell ThinOS 10, versions prior to SecurityAddon2605.10.2766T10, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

8.6CVSS5.9AI score0.00262EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/24 12:00 a.m.•7 views

CVE-2026-97231: Missing Authentication for Critical Function

A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...

7.5CVSS6.6AI score0.00383EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/24 12:00 a.m.•5 views

PT-2026-98290

Taskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and requires no...

8.5CVSS6.1AI score0.00265EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/23 4:16 p.m.•18 views

CVE-2026-19267

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS0.00125EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/23 4:16 p.m.•21 views

CVE-2026-18185

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system configurations due to missing authentication for a critical function...

7.3CVSS0.00263EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 3:49 p.m.•27 views

CVE-2026-19267

IBM Financial Transaction Manager (FTM) for RedHat OpenShift versions 4.0.6.0 - 4.0.10.0 are vulnerable to a missing authentication flaw on the Business Rules Manager commands REST endpoint (CommandsResource.java:31). This security weakness, categorized as CWE-306 , allows a local actor to invoke...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/09/23 3:49 p.m.•13 views

EUVD-2026-85358

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/23 3:49 p.m.•50 views

CVE-2026-19267 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS0.00125EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/23 3:49 p.m.•12 views

CVE-2026-19267 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST endpoint CommandsResource.java:31. A local actor can invoke unauthenticated commands to cause resource exhaustionand halt business-rule management functio...

6.2CVSS5.8AI score0.00125EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/23 3:44 p.m.•24 views

CVE-2026-18185

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is affected by CVE-2026-18185 , which stems from missing authentication for a critical function (CWE-306). A remote attacker could exploit this flaw to access sensitive information and modify system configurations . The vulnerability im...

7.3CVSS6AI score0.00263EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder