Lucene search
K

2911 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/22 9:18 a.m.5 views

CVE-2026-1332

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS5.4AI score0.00027EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/22 9:18 a.m.16 views

CVE-2026-1332 HAMASTAR Technology|MeetingHub - Missing Authentication

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS0.00027EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 9:18 a.m.3 views

CVE-2026-1332 HAMASTAR Technology|MeetingHub - Missing Authentication

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS5.5AI score0.00027EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 9:18 a.m.11 views

CVE-2026-1332

CVE-2026-1332 affects MeetingHub (HAMASTAR Technology). The Red Hat, NVD, CVE lists describe a Missing Authentication vulnerability that lets unauthenticated remote attackers access specific API functions and retrieve meeting-related information. There are no details about affected versions, root...

6.9CVSS5.5AI score0.00027EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.5 views

PT-2026-3925

MeetingHub developed by HAMASTAR Technology has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access specific API functions and obtain meeting-related information...

6.9CVSS5.5AI score0.00027EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/01/21 8:5 p.m.2 views

CVE-2025-69285

SQLBot is an intelligent data query system based on a large language model and RAG. Versions prior to 1.5.0 contain a missing authentication vulnerability in the /api/v1/datasource/uploadExcel endpoint, allowing a remote unauthenticated attacker to upload arbitrary Excel/CSV files and inject data...

8.7CVSS5.5AI score0.00109EPSS
Exploits1References3Affected Software1
Snyk
Snyk
added 2026/01/19 9:50 p.m.11 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the environment proxy middleware. An attacker can gain unauthorized access to and manipulate remote environment resources by sending unauthenticated requests that are proxied to remote...

9.8CVSS5.6AI score0.00204EPSS
Exploits0References2
Snyk
Snyk
added 2026/01/19 9:50 p.m.9 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the environment proxy middleware. An attacker can gain unauthorized access to and manipulate remote environment resources by sending unauthenticated requests that are proxied to remote...

9.8CVSS5.6AI score0.00204EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/17 4:23 a.m.12 views

CVE-2026-1023

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS7.1AI score0.00046EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/17 3:22 a.m.11 views

CVE-2026-1019

Police Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents by using a specific functionality...

9.8CVSS7.1AI score0.00113EPSS
Exploits0References1
Snyk
Snyk
added 2026/01/16 9:15 p.m.4 views

Missing Authentication for Critical Function

Overview @mcpjam/inspector is a MCPJam Inspector Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the connect route in the HTTP API. An attacker can execute arbitrary commands on the host system by sending a crafted HTTP request containing...

9.8CVSS6.3AI score0.28064EPSS
Exploits28References2
Vulnrichment
Vulnrichment
added 2026/01/16 9:23 a.m.3 views

CVE-2025-14844 Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcpstripecreatesetupintentforsavedcard' function due to missing capability check. Additionally, the plugin does not check a user-controlled...

8.2CVSS5.3AI score0.0011EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/01/16 9:23 a.m.26 views

CVE-2025-14844 Membership Plugin – Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcpstripecreatesetupintentforsavedcard' function due to missing capability check. Additionally, the plugin does not check a user-controlled...

8.2CVSS0.0011EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/01/16 9:23 a.m.3 views

CVE-2025-14844

The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcpstripecreatesetupintentforsavedcard' function due to missing capability check. Additionally, the plugin does not check a user-controlled...

8.2CVSS5.3AI score0.0011EPSS
Exploits0References7
Patchstack
Patchstack
added 2026/01/16 6:36 a.m.6 views

WordPress Membership Plugin - Restrict Content plugin <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure vulnerability

WordPress Membership Plugin - Restrict Content plugin = 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure vulnerability discovered by andrea bocchetti in WordPress Plugin Restrict Content versions = 3.2.16...

8.2CVSS7AI score0.0011EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2026/01/16 4:15 a.m.4 views

CVE-2026-1023

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS0.00046EPSS
Exploits0References2
CVE
CVE
added 2026/01/16 3:43 a.m.11 views

CVE-2026-1023

CVE-2026-1023 affects the Statistics Database System developed by Gotac. The vulnerability is described as a Missing Authentication flaw that allows unauthenticated remote attackers to directly exploit a specific functionality to query database contents. The connected sources corroborate the same...

8.7CVSS6.7AI score0.00046EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/01/16 3:43 a.m.28 views

CVE-2026-1023 Gotac|Statistics Database System - Missing Authentication

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS0.00046EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 3:43 a.m.3 views

CVE-2026-1023

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS5.5AI score0.00046EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/16 3:43 a.m.2 views

CVE-2026-1023 Gotac|Statistics Database System - Missing Authentication

Statistics Database System developed by Gotac has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly exploit a specific functionality to query database contents...

8.7CVSS6.7AI score0.00046EPSS
Exploits0References2
Rows per page
Query Builder