Lucene search
K

2927 matches found

Snyk
Snyk
added 2026/05/07 12:6 a.m.6 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the SNS HTTP/HTTPS notification endpoints due to missing signature verification. An attacker can cause the application to process arbitrary payloads as legitimate notifications, auto-confi...

6.3CVSS5.9AI score0.00179EPSS
Exploits0References2
Snyk
Snyk
added 2026/05/06 9:52 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the gRPC management server. An attacker can access sensitive BGP configuration and manipulate routing decisions by sending unauthorized gRPC requests from any pod within the cluster. This...

6.3CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/06 9:52 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the gRPC management server. An attacker can access sensitive BGP configuration and manipulate routing decisions by sending unauthorized gRPC requests from any pod within the cluster. This...

6.3CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/06 9:52 p.m.2 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the gRPC management server. An attacker can access sensitive BGP configuration and manipulate routing decisions by sending unauthorized gRPC requests from any pod within the cluster. This...

6.3CVSS5.9AI score
Exploits0References2
EUVD
EUVD
added 2026/05/06 9:31 p.m.5 views

EUVD-2026-28149

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

6.9CVSS5.8AI score0.00394EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/05/06 8:22 p.m.6 views

CVE-2026-7844

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

6.3CVSS6.4AI score0.00322EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/05/06 6:0 p.m.28 views

CVE-2026-8031 PicoTronica e-Clinic Healthcare System ECHS API Endpoint patient-records missing authentication

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

6.9CVSS0.00394EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/06 6:0 p.m.3 views

CVE-2026-8031

A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7. The affected element is an unknown function of the file /cdemos/echs/api/v2/patient-records of the component API Endpoint. The manipulation results in missing authentication. The attack can be executed remotely. The...

6.9CVSS5.8AI score0.00394EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2026/05/06 6:0 p.m.8 views

CVE-2026-8031

CVE-2026-8031 affects PicoTronica e-Clinic Healthcare System ECHS 5.7. The vulnerability is in the API Endpoint at /cdemos/echs/api/v2/patient-records, where missing authentication allows remote access. The issue is rooted in an unknown function of the endpoint component, enabling an attacker to ...

6.9CVSS5.8AI score0.00394EPSS
Exploits0References4
Snyk
Snyk
added 2026/05/06 5:5 p.m.7 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the UI server WebSocket. An attacker can gain unauthorized access to sensitive endpoints, such as streaming real-time pod logs, opening an interactive shell inside a running pod, or...

7.8CVSS5.8AI score0.00152EPSS
Exploits0References2
Snyk
Snyk
added 2026/05/06 4:59 p.m.4 views

Missing Authentication for Critical Function

Overview github.com/0xJacky/Nginx-UI is a yet another Nginx Web UI, developed by 0xJacky and Hintay. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the POST /api/install endpoint during the initial setup 10 minutes window, which is accessible...

9.8CVSS5.8AI score0.00339EPSS
Exploits1References3
GithubExploit
GithubExploit
added 2026/05/06 5:52 a.m.54 views

Exploit for Missing Authentication for Critical Function in Cpanel

No d...

9.8CVSS6AI score0.90543EPSS
Exploits62
GithubExploit
GithubExploit
added 2026/05/06 3:42 a.m.69 views

Exploit for Missing Authentication for Critical Function in Vitejs Vite

CVE-2026...

8.2CVSS5.8AI score0.0229EPSS
Exploits3
Snyk
Snyk
added 2026/05/05 10:2 p.m.9 views

Missing Authentication for Critical Function

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the objects/users.json.php process. An attacker can retrieve sensitive user information, including user IDs, displa...

6.9CVSS5.8AI score0.0027EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/05 6:33 p.m.4 views

EUVD-2026-27388

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

6.3CVSS6.4AI score0.00322EPSS
Exploits0References7
Snyk
Snyk
added 2026/05/05 5:25 p.m.4 views

Missing Authentication for Critical Function

Overview network-ai is an AI agent orchestration framework for TypeScript/Node.js - 29 adapters LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw, A2A, Codex, MiniMax, NemoClaw, APS, Copilot, LangGraph, Anthropic Compu Affected version...

8.7CVSS5.8AI score0.00471EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/05/05 5:25 p.m.10 views

Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls

Security Advisory: Missing Authentication for Critical Function in Jovancoding/Network-AI | Field | Value | |---|---| | Project | Jovancoding/Network-AI | | Repository | https://github.com/Jovancoding/Network-AI | | Affected commit | c344f2053eb0d49395988f803bf92f2a86b2a0d0 | | Affected tested...

8.7CVSS6AI score0.00471EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2026/05/05 5:25 p.m.1 views

GHSA-FJ4G-2P96-Q6M3 Network-AI missing authentication on MCP HTTP endpoint, which allows unauthenticated privileged tool calls

Security Advisory: Missing Authentication for Critical Function in Jovancoding/Network-AI | Field | Value | |---|---| | Project | Jovancoding/Network-AI | | Repository | https://github.com/Jovancoding/Network-AI | | Affected commit | c344f2053eb0d49395988f803bf92f2a86b2a0d0 | | Affected tested...

8.7CVSS6AI score0.00471EPSS
Exploits0References3
NVD
NVD
added 2026/05/05 4:16 p.m.9 views

CVE-2026-7844

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

6.3CVSS0.00322EPSS
Exploits0References6
Cvelist
Cvelist
added 2026/05/05 3:0 p.m.31 views

CVE-2026-7844 chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/listfiles/retrievefile/retrievefilecontent/deletefile of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Compatible File Service...

6.3CVSS0.00322EPSS
Exploits0References6
Rows per page
Query Builder