Lucene search
+L

7052 matches found

RedhatCVE
RedhatCVE
•added 2025/04/11 9:56 a.m.•15 views

CVE-2025-29870

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

7.5CVSS7.2AI score0.00565EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/09 6:15 p.m.•15 views

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS5.8AI score0.00383EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/09 6:15 p.m.•60 views

CVE-2025-3474

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS0.00383EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/09 5:48 p.m.•21 views

CVE-2025-3474 Panels - Critical - Access bypass - SA-CONTRIB-2025-033

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.7AI score0.00383EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•3 views

CVE-2025-3474: Missing Authentication for Critical Function

Missing Authentication for Critical Function vulnerability in Drupal Panels allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Panels: from 0.0.0 before 4.9.0...

6.5CVSS5.9AI score0.00383EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/09 12:00 a.m.•22 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal versions prior to 4.9.0 that stems from a lack of authentication for critical functions, which could lead to improper access control...

6.5CVSS6.7AI score0.00383EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•12 views

PT-2025-15684 · Unknown · Ac-Wps-11Ac Series

Name of the Vulnerable Software and Affected Versions: Wi-Fi AP UNIT 'AC-WPS-11ac series' affected versions not specified Description: A missing authentication for critical function vulnerability exists, allowing a remote unauthenticated attacker to obtain the product configuration information,...

7.5CVSS6.5AI score0.00565EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•7 views

CVE-2025-29870: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability exists in Wi-Fi AP UNIT 'AC-WPS-11ac series'. If exploited, a remote unauthenticated attacker may obtain the product configuration information including authentication information...

7.5CVSS8.2AI score0.00565EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•7 views

CVE-2024-41793: Missing Authentication for Critical Function

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager All versions. The web interface of affected devices provides an endpoint that allows to enable the ssh service without authentication. This could allow an unauthenticated remote attacker to enable remote access to the device...

8.6CVSS7.5AI score0.00551EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/08 12:00 a.m.•8 views

CVE-2024-41791: Missing Authentication for Critical Function

A vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager All versions. The web interface of affected devices does not authenticate report creation requests. This could allow an unauthenticated remote attacker to read or clear the log files on the device, reset the device or set the...

7.3CVSS7AI score0.00389EPSS
SaveExploits0References1
Snyk
Snyk
•added 2025/04/07 2:43 p.m.•7 views

Missing Authentication for Critical Function

Overview langflow is an A Python package with a built-in web application Affected versions of this package are vulnerable to Missing Authentication for Critical Function at the /api/v1/validate/code endpoint, which allows an attacker to execute arbitrary code by sending malicious HTTP requests...

9.8CVSS8.7AI score0.99993EPSS
SaveExploits38References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/04/07 8:44 a.m.•67 views

Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT 'AC-WPS-11ac series'

Overview Wi-Fi AP UNIT 'AC-WPS-11ac series' provided by Inaba Denki Sangyo Co., Ltd. contain multiple vulnerabilities listed below. Incorrect privilege assignment in the WEB UI the setting page CWE-266 - CVE-2025-23407 OS command injection in the WEB UI the setting page CWE-78 - CVE-2025-25053...

9.8CVSS8AI score0.01002EPSS
SaveExploits0References17
NVD
NVD
•added 2025/04/02 10:15 p.m.•28 views

CVE-2025-0257

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS0.00306EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/02 10:15 p.m.•16 views

CVE-2025-0257

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/02 10:04 p.m.•13 views

CVE-2025-0257 HCL DevOps Deploy / HCL Launch is susceptible to unauthorized access to other services

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

6.3CVSS7.2AI score0.00306EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/02 12:00 a.m.•21 views

PT-2025-14561 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to missing authentication in the Agent Relay service, which could allow unauthorized access to other services or potential exposure of sensitive...

7.5CVSS6.2AI score0.00306EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•7 views

CVE-2025-25060: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker...

8.2CVSS7.6AI score0.00512EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•10 views

CVE-2025-0257: Missing Authentication for Critical Function

HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service...

7.5CVSS5.8AI score0.00306EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/03/31 12:00 a.m.•23 views

WordPress Checkout Mestres do WP for WooCommerce 8.7.5 Missing Authentication

WordPress Checkout Mestres do WP for WooCommerce plugin versions 8.6.5 through 8.7.5 suffer from a missing authentication vulnerability that allows you to update options...

9.8CVSS7AI score0.0072EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/03/29 3:21 p.m.•38 views

CVE-2024-56469

IBM UrbanCode Deploy UCD 7.1 through 7.1.2.22, 7.2 through 7.2.3.15, and 7.3 through 7.3.2.10 / IBM DevOps Deploy 8.0 through 8.0.1.5 and 8.1 through 8.1.0.1 could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay...

6.3CVSS7.1AI score0.00257EPSS
SaveExploits0References1
Rows per page
Query Builder