Lucene search
+L

7872 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•5 views

CVE-2026-11238: Missing Authentication for Critical Function

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

5.9CVSS5.6AI score0.0017EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•11 views

CVE-2025-71318: Missing Authentication for Critical Function

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages such as administration.html, administration-commands.html, and configuration.html to disclose sensitive information including...

9.8CVSS5.8AI score0.00533EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•10 views

CVE-2026-6274: Improper Authentication

Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerability in DTS Electronics Industry and Trade Ltd. Co. Redline WR3200 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Redline WR3200: from 7.1.3 before 7.1.8...

9.8CVSS5.8AI score0.0046EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•12 views

CVE-2026-50225: Missing Authentication for Critical Function

The registration path /v1/account/register provides no bot mitigation mechanisms, allowing malicious automated systems to flood the database...

9.1CVSS5.8AI score0.00243EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/06/03 5:14 a.m.•150 views

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 분석 포트폴리오 Erlang/OTP SSH 사전인증 원격 코드 실행 취약점 분석...

10CVSS8.5AI score0.98924EPSS
SaveExploits41
Tenable Nessus
Tenable Nessus
•added 2026/06/03 12:00 a.m.•19 views

Gladinet Triofox Server Agent Missing Authentication for Critical Function (CVE-2026-8364)

Binary data gladinettriofoxserveragentcve-2026-8364.nbin...

9.8CVSS5.8AI score0.00379EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/02 10:22 p.m.•13 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the resolveAuth function of the Webhook Verification Handler. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by sending...

7.5CVSS7.3AI score0.00399EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/02 10:22 p.m.•11 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the resolveAuth function of the Webhook Verification Handler. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by sending...

7.5CVSS7.3AI score0.00399EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/02 10:22 p.m.•13 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the resolveAuth function of the Webhook Verification Handler. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by sending...

7.5CVSS7.3AI score0.00399EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/06/02 10:22 p.m.•26 views

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the resolveAuth function of the Webhook Verification Handler. An attacker can gain unauthorized access and potentially compromise confidentiality, integrity, and availability by sending...

7.5CVSS7.3AI score0.00399EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/06/02 7:00 p.m.•23 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

6.9CVSS5.2AI score
SaveExploits0References8
Mend
Mend
•added 2026/06/02 7:00 p.m.•11 views

CVE-2026-10617

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.6AI score0.00399EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/06/02 7:00 p.m.•24 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.6AI score0.00399EPSS
SaveExploits0References6
CVE
CVE
•added 2026/06/02 7:00 p.m.•88 views

CVE-2026-10617

The CVE-2026-10617 entry describes a vulnerability in nextlevelbuilder GoClaw up to version 3.11.3, affecting the resolveAuth function in internal/http/auth.go of the Webhook Verification Handler. The issue results from a manipulation that leads to missing authentication, enabling remote exploita...

7.5CVSS6.6AI score0.00399EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/06/02 7:00 p.m.•71 views

CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS0.00399EPSS
SaveExploits0References6
GithubExploit
GithubExploit
•added 2026/06/02 4:34 a.m.•139 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744 --- Description MCPJam inspector is a loca...

9.8CVSS6.6AI score0.67516EPSS
SaveExploits45
GithubExploit
GithubExploit
•added 2026/06/02 2:25 a.m.•138 views

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

No d...

9.8CVSS6.1AI score0.67516EPSS
SaveExploits45
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•9 views

CVE-2026-10617: Missing Authentication for Critical Function

A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the function resolveAuth of the file internal/http/auth.go of the component Webhook Verification Handler. The manipulation leads to missing authentication. Remote exploitation of the attack is possibl...

7.5CVSS6.5AI score0.00399EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•8 views

CVE-2026-42074: Missing Authentication for Critical Function

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Prior to version 0.5.1, the dangerouslyDisableSandbox parameter is exposed as part of the BashTool input schema, meaning the LLM an untrusted principal per the project's own threat model can set ...

9.8CVSS6.5AI score0.00589EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2026/06/01 10:05 p.m.•70 views

CVE-2026-24090 Missing Authentication for Critical Function in HLOS

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow...

7.1CVSS0.00062EPSS
SaveExploits0References1
Rows per page
Query Builder