CVE-2024-57155

Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token...

CVE-2024-57155

Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token...

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

CVE-2024-57157

Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token...

BELL-CVE-2025-38585

Bulletin has no description...

CVE-2025-50904

There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...

CVE-2024-57157

Summary (CVE-2024-57157): Jantent v1.1 has an incorrect access control flaw that allows unauthenticated access to sensitive APIs. Affected component is the application’s authentication/authorization logic; root cause is improper access checks, enabling a network-based bypass without a token. CVSS...

CVE-2024-57157

Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token...

PT-2025-34073 · Jantent · Jantent

Name of the Vulnerable Software and Affected Versions: Jantent version 1.1 Description: Incorrect access control in Jantent version 1.1 allows attackers to bypass authentication and access sensitive APIs without a token. Recommendations: At the moment, there is no information about a newer versio...

PT-2025-34156 · Radar · Radar

Name of the Vulnerable Software and Affected Versions: radar version 1.0.8 Description: Incorrect access control in radar version 1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token. The issue enables unauthorized access to sensitive API endpoints...

Linux Distros Unpatched Vulnerability : CVE-2021-43303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in PJSUA API when calling pjsuacalldump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer...

CVE-2024-57155

The CVE CVE-2024-57155 affects Radar v1.0.8 and is caused by improper access control that lets unauthenticated users bypass authentication to reach sensitive API endpoints. This is described across multiple sources (NVD/Red Hat/CIRCL entries referencing radar 1.0.8). Impact: high confidentiality,...

CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability affects Firefox 141...

CVE-2025-8042

Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...

CVE-2025-41689 Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access

An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stored measurement data...

BELL-CVE-2025-38516

Bulletin has no description...

PT-2025-33825

Name of the Vulnerable Software and Affected Versions: The Bevy Event service versions through 2025-07-22 Description: The Bevy Event service, used for eBay Seller Events and other activities, is susceptible to account takeover when Single Sign-On SSO is enabled and a victim modifies their...

CGA-CCJR-8CF6-8PCJ

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2018-14338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - samples/geotag.cpp in the example code of Exiv2 0.26 misuses the realpath function on POSIX platforms other than Apple platforms where glibc is not used, possib...

Unspecified Vulnerability in Emby MediaBrowser (CNVD-2025-19597)

Emby MediaBrowser is a media server software from Emby. A security vulnerability exists in Emby MediaBrowser that can be exploited by an attacker to change passwords without verification...