Lucene search
K

2931 matches found

CVE
CVE
added 2025/06/30 9:39 a.m.16 views

CVE-2024-8419

CVE-2024-8419 affects the AC4xxS line of ifm electronic devices. The root cause is missing authentication in an endpoint script, allowing an unauthorized remote attacker to force the system into a fail-safe state over the network. Public details across sources confirm the basic impact but do not ...

7.5CVSS6.5AI score0.00408EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/29 12:6 p.m.8 views

CVE-2025-6763

A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing...

9.2CVSS7.5AI score0.01157EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/28 11:7 p.m.4 views

CVE-2025-3699

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all...

9.8CVSS7.7AI score0.0109EPSS
Exploits0References1
NVD
NVD
added 2025/06/27 12:15 p.m.4 views

CVE-2025-6763

A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing...

9.2CVSS0.01157EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/27 11:31 a.m.7 views

CVE-2025-6763 Comet System H3531 Web-based Management setupA.cfg missing authentication

A vulnerability was found in Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 1.60. Affected by this issue is some unknown functionality of the file /setupA.cfg of the component Web-based Management Interface. Performing manipulation results in missing...

9.2CVSS0.01157EPSS
Exploits1References5
CVE
CVE
added 2025/06/27 11:31 a.m.21 views

CVE-2025-6763

The CVE-2025-6763 entry concerns a missing authentication issue in the Web-based Management Interface of multiple Comet System products (T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552, H3531) version 1.60. The vulnerability centers on the file /setupA.cfg; manipulation of this file...

9.2CVSS7.2AI score0.01157EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/27 12:0 a.m.3 views

PT-2025-27143

Name of the Vulnerable Software and Affected Versions: Comet System T0510, T3510, T3511, T4511, T6640, T7511, T7611, P8510, P8552 and H3531 version 1.60 Description: A critical vulnerability was found in the Web-based Management Interface component of the affected systems, specifically affecting...

9.2CVSS7.2AI score0.01157EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/06/27 12:0 a.m.6 views

PT-2025-27462 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 B20211015 Description: A critical vulnerability was found in the TOTOLINK T6, affecting the Form Login function of the file /formLoginAuth.htm. The manipulation of the authCode/goURL argument leads to missing...

8.8CVSS6.8AI score0.00747EPSS
Exploits1References13
NVD
NVD
added 2025/06/26 11:15 p.m.17 views

CVE-2025-3699

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all...

9.8CVSS0.0109EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/06/26 10:40 p.m.2 views

CVE-2025-3699

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all...

9.8CVSS7.6AI score0.0109EPSS
Exploits0References3
Snyk
Snyk
added 2025/06/26 9:29 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the rekey process. An attacker can disrupt critical security operations by sending unauthenticated requests to cancel root rekey and recovery rekey operations. This can result in denial o...

7.5CVSS7AI score0.00331EPSS
Exploits0References2
Snyk
Snyk
added 2025/06/26 9:29 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the rekey process. An attacker can disrupt critical security operations by sending unauthenticated requests to cancel root rekey and recovery rekey operations. This can result in denial o...

7.5CVSS7AI score0.00331EPSS
Exploits0References2
FreeBSD
FreeBSD
added 2025/06/25 12:0 a.m.4 views

Gitlab -- Vulnerabilities

Gitlab reports: Denial of Service impacts GitLab CE/EE Missing Authentication issue impacts GitLab CE/EE Improper access control issue impacts GitLab CE/EE Elevation of Privilege impacts GitLab CE/EE Improper access control issue impacts GitLab EE...

8.8CVSS7.3AI score0.00304EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/24 8:5 a.m.11 views

CVE-2025-3090 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function...

8.2CVSS0.00411EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/24 8:5 a.m.7 views

CVE-2025-3090 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function...

8.2CVSS7.2AI score0.00411EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/24 12:0 a.m.4 views

PT-2025-26709 · Mb Connect Line +1 · Mbconnect24 +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker can obtain limited sensitive information and/or cause a denial of service DoS on the device due to missing authentication for a critical function...

8.2CVSS6.8AI score0.00411EPSS
Exploits0References5
Snyk
Snyk
added 2025/06/19 12:30 p.m.4 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the restful api-v1 endpoint. An attacker can gain unauthorized access to sensitive operations by submitting jobs through the /hazelcast/rest/maps/submit-job endpoint and setting extra...

6.9CVSS7.1AI score0.01039EPSS
Exploits0References2
Snyk
Snyk
added 2025/06/19 12:30 p.m.6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the restful api-v1 endpoint. An attacker can gain unauthorized access to sensitive operations by submitting jobs through the /hazelcast/rest/maps/submit-job endpoint and setting extra...

6.9CVSS7.1AI score0.01039EPSS
Exploits0References2
CNVD
CNVD
added 2025/06/17 12:0 a.m.3 views

Laundry System Authentication Missing Vulnerability

Laundry System is a laundry system. The Laundry System suffers from a missing authentication vulnerability that could be exploited by an attacker to compromise confidentiality, integrity, and availability...

9.8CVSS7AI score0.00514EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2025/06/15 12:42 p.m.237 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

VIETNAMESE - Cách sử dụng - Quét một IP: python3...

10CVSS8.3AI score0.97673EPSS
Exploits36
Rows per page
Query Builder