Lucene search
+L

8 matches found

NVD
NVD
•added 2026/07/13 10:16 p.m.•29 views

CVE-2026-59801

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing authentication middleware in the Next.js API routes under...

9.8CVSS0.02619EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/07/13 9:30 p.m.•32 views

CVE-2026-59801 9Router 0.4.41 - Unauthenticated API Exposure via /api/providers

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing authentication middleware in the Next.js API routes under...

9.3CVSS5.9AI score0.06272EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/13 9:30 p.m.•19 views

CVE-2026-59801

9Router through version 0.4.41 contains an unauthenticated access vulnerability that allows remote attackers to interact with provider management API endpoints by sending requests without any credentials due to missing authentication middleware in the Next.js API routes under...

9.8CVSS5.9AI score0.02619EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/11 7:16 p.m.•23 views

CVE-2019-25470

eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentia...

8.7CVSS0.00405EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2025/10/31 11:15 a.m.•22 views

CVE-2025-40603

A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote, authenticated administrator, under certain conditions to view partial users credential data...

4.5CVSS5.4AI score0.0048EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2022/03/18 6:00 p.m.•13 views

CVE-2022-0547

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials...

9.6AI score0.03478EPSS
SaveExploits0References6
NCSC
NCSC
•added 2022/03/18 12:00 a.m.•15 views

Vulnerability fixed in OpenVPN

A vulnerability has been fixed in OpenVPN. A malicious person who has a user's partial credentials can exploit the exploit the vulnerability to bypass authentication. Only systems that use multiple external authentication plug-ins are vulnerable. OpenVPN has released updates to fix the...

9.8CVSS7.1AI score0.03478EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/03/18 12:00 a.m.•12 views

OpenVPN authorization issue vulnerability

OpenVPN is a software package for creating encrypted tunnels for virtual private networks VPNs from US-based OpenVPN, which uses the OpenSSL library to encrypt data and control information and allows created VPNs to be authenticated using public keys, electronic certificates, or...

9.8CVSS7.2AI score0.03478EPSS
SaveExploits0References12
Rows per page
Query Builder