Lucene search
+L

6879 matches found

Packet Storm
Packet Storm
•added 2024/03/04 12:00 a.m.•224 views

TPC-110W Missing Authentication

include include include include include include int mainint argc, char argv int sock; struct sockaddrin servaddr; char command512; sock = socketAFINET, SOCKSTREAM, 0; if sock 0 perror"socket"; exit1; memset&servaddr, '0', sizeofservaddr; servaddr.sinfamily = AFINET; servaddr.sinport = htons8888; ...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2024/03/03 12:00 a.m.•331 views

TPC-110W - Missing Authentication for Critical Function

include include include include include include int mainint argc, char argv int sock; struct sockaddrin servaddr; char command512; sock = socketAFINET, SOCKSTREAM, 0; if sock 0 perror"socket"; exit1; memset&servaddr, '0', sizeofservaddr; servaddr.sinfamily = AFINET; servaddr.sinport = htons8888; ...

5.3AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/03/01 6:31 p.m.•20 views

CVE-2024-2076 CodeAstro House Rental Management System tenant.php missing authentication

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. Th...

5.3CVSS6.9AI score0.00918EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•18 views

House Rental Management System Security Vulnerability

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A security vulnerability exists in House Rental Management System version 1.0, which stems from an unknown function in booking.php/owner.php/tenant.php that results in missing authentication...

7.5CVSS6.8AI score0.00918EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•5 views

CVE-2024-2076: Missing Authentication for Critical Function

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file booking.php/owner.php/tenant.php. The manipulation leads to missing authentication. The attack may be launched remotely. Th...

7.5CVSS5.2AI score0.00918EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/03/01 12:00 a.m.•3 views

PT-2024-18701

Name of the Vulnerable Software and Affected Versions CodeAstro House Rental Management System version 1.0 Description A problematic issue has been found in the system, affecting some unknown functionality of the files booking.php, owner.php, and tenant.php. This issue leads to missing...

7.5CVSS0.00918EPSS
SaveExploits0References7
OSV
OSV
•added 2024/02/18 7:15 a.m.•16 views

CVE-2022-48621

Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.8AI score0.00242EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/02/18 6:14 a.m.•45 views

CVE-2022-48621

Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality...

7AI score0.00242EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/18 12:00 a.m.•5 views

CVE-2022-48621: Missing Authentication for Critical Function

Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect service confidentiality...

7.5CVSS5.9AI score0.00242EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/15 12:00 a.m.•6 views

CVE-2024-26263: Missing Authentication for Critical Function

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login...

7.5CVSS5.8AI score0.0042EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•5 views

CVE-2024-23783: Missing Authentication for Critical Function

Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to access the affected product without authentication...

8.8CVSS5.9AI score0.00519EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/02/02 12:00 a.m.•24 views

The vulnerabilities of microprogramming software in FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi systems allow a intruder to gain unauthorized access to protected information, execute arbitrary code, and gain full control over the device.

The vulnerability of the microprogramming software in FeverWarn ESP32, FeverWarn RaspberryPi, and the FeverWarn DataHub RaspberryPi systems is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized...

9.4CVSS8.1AI score0.00652EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/02/01 10:28 p.m.•18 views

CVE-2023-49115 MachineSense FeverWarn Missing Authentication for Critical Function

MachineSense devices use unauthenticated MQTT messaging to monitor devices and remote viewing of sensor data by users...

7.5CVSS7.2AI score0.00592EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/01 10:26 p.m.•19 views

CVE-2023-49617 MachineSense FeverWarn Missing Authentication for Critical Function

The MachineSense application programmable interface API is improperly protected and can be accessed without authentication. A remote attacker could retrieve and modify sensitive information without any authentication...

10CVSS6.6AI score0.00798EPSS
SaveExploits0References2
OSV
OSV
•added 2024/02/01 10:15 a.m.•15 views

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

7.8CVSS5.8AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/01 10:15 a.m.•27 views

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

7.8CVSS6.9AI score0.00171EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/01 9:48 a.m.•8 views

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

6.6CVSS7AI score0.00171EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/02/01 9:20 a.m.•24 views

Authentication Bypass

Lobe Chat is vulnerable to Authentication Bypass. The vulnerability is caused due to missing authentication checks within route.ts when the application is password-protected deployed with the ACCESSCODE option. This allows an attacker to access plugins without proper authorization...

5.3CVSS7AI score0.00482EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•5 views

CVE-2024-22449: Missing Authentication for Critical Function

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

7.8CVSS5.9AI score0.00171EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•2 views

CVE-2023-6221: Missing Authentication for Critical Function

The cloud provider MachineSense uses for integration and deployment for multiple MachineSense devices, such as the programmable logic controller PLC, PumpSense, PowerAnalyzer, FeverWarn, and others is insufficiently protected against unauthorized access. An attacker with access to the internal...

7.7CVSS5.8AI score0.00582EPSS
SaveExploits0References3
Rows per page
Query Builder