Lucene search
K

2931 matches found

Cvelist
Cvelist
added 2026/06/05 5:49 p.m.23 views

CVE-2025-71318 NetMan 204 Missing Authentication for Administrative Functions

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...

9.8CVSS0.00533EPSS
Exploits0References3
CVE
CVE
added 2026/06/05 4:57 p.m.13 views

CVE-2026-45327

TinyIce (Go) versions 0.8.95–2.4.1 expose a missing authentication on the WebRTC ingest endpoint POST /webrtc/source-offer?mount=, enabling unauthenticated stream injection. The issue is fixed in v2.5.0 by requiring either HTTP Basic auth or a ?password= query parameter, verifying the supplied pa...

8.2CVSS5.5AI score0.00337EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/06/05 9:1 a.m.5 views

CVE-2026-6274

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.00371EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/06/05 9:1 a.m.13 views

CVE-2026-6274

CVE-2026-6274 concerns an authentication weakness in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200, where improper/missing authentication for a critical function allows accessing functionality not properly constrained by ACLs. Affected firmware ranges are 7.1.3 through before 7.1.8. ...

9.8CVSS5.5AI score0.00371EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/05 9:1 a.m.10 views

EUVD-2026-34793

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.00371EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2026/06/05 7:27 a.m.51 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

cve-2026...

9.8CVSS5.4AI score0.36126EPSS
Exploits29
GithubExploit
GithubExploit
added 2026/06/05 5:19 a.m.57 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-MCPJAM-RCE-exploit This Python proof-of-concept...

9.8CVSS6AI score0.36126EPSS
Exploits29
Positive Technologies
Positive Technologies
added 2026/06/05 12:0 a.m.12 views

PT-2026-46912

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.5AI score0.00371EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/06/03 5:14 a.m.83 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 분석 포트폴리오 Erlang/OTP SSH 사전인증 원격 코드 실행 취약점 분석...

10CVSS7.1AI score0.97673EPSS
Exploits36
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.6 views

Gladinet Triofox Server Agent Missing Authentication for Critical Function (CVE-2026-8364)

Binary data gladinettriofoxserveragentcve-2026-8364.nbin...

9.8CVSS5.8AI score0.00305EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/06/02 7:0 p.m.27 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS0.00399EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/06/02 7:0 p.m.7 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.5AI score0.00399EPSS
Exploits0References6
CVE
CVE
added 2026/06/02 7:0 p.m.12 views

CVE-2026-10617

The CVE-2026-10617 entry describes a vulnerability in nextlevelbuilder GoClaw up to version 3.11.3, affecting the resolveAuth function in internal/http/auth.go of the Webhook Verification Handler. The issue results from a manipulation that leads to missing authentication, enabling remote exploita...

7.5CVSS6.5AI score0.00399EPSS
Exploits0References6
GithubExploit
GithubExploit
added 2026/06/02 4:34 a.m.62 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 --- Description MCPJam inspector is a loca...

9.8CVSS6.6AI score0.36126EPSS
Exploits29
GithubExploit
GithubExploit
added 2026/06/02 2:25 a.m.72 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

9.8CVSS6AI score0.36126EPSS
Exploits29
Cvelist
Cvelist
added 2026/06/01 10:5 p.m.28 views

CVE-2026-24090 Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

7.1CVSS0.00062EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/01 10:5 p.m.7 views

CVE-2026-24090 Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

7.1CVSS5.8AI score0.00062EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/01 10:5 p.m.27 views

CVE-2026-24088 Missing Authentication for Critical Function in Boot

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader...

8.2CVSS0.00071EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/01 10:5 p.m.7 views

CVE-2026-24088 Missing Authentication for Critical Function in Boot

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader...

8.2CVSS5.8AI score0.00071EPSS
Exploits0References1
NVD
NVD
added 2026/06/01 7:16 p.m.9 views

CVE-2026-10283

A vulnerability was detected in Bottelet DaybydayCRM up to 2.2.1. Affected is an unknown function of the component Setting Handler. Performing a manipulation results in missing authentication. Remote exploitation of the attack is possible. It is recommended to apply a patch to fix this issue...

6.5CVSS0.00497EPSS
Exploits0References8
Rows per page
Query Builder