2542 matches found
CVE-2024-50641
An authentication bypass vulnerability in PandoraNext-TokensTool v0.6.8 and before. An attacker can exploit this vulnerability to access API without any token...
CVE-2024-57155
Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token...
CVE-2024-57155
Incorrect access control in radar v1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token...
CVE-2024-53495
Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...
CVE-2024-57157
Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token...
BELL-CVE-2025-38585
Bulletin has no description...
CVE-2024-57157
The software Jantent version 1.1 is affected by an incorrect access control vulnerability. This flaw allows an attacker to bypass authentication and gain unauthorized access to sensitive APIs without providing a required token. No information regarding a newer version containing a fix is currentl...
CVE-2025-50904
There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 2025-06-11. An attacker can exploit this vulnerability to access /admin/ API without any token...
CVE-2025-4437: Allocation of Resources Without Limits or Throttling
There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...
PT-2025-34073 · Jantent · Jantent
Name of the Vulnerable Software and Affected Versions: Jantent version 1.1 Description: Incorrect access control in Jantent version 1.1 allows attackers to bypass authentication and access sensitive APIs without a token. Recommendations: At the moment, there is no information about a newer versio...
CVE-2024-57157
Incorrect access control in Jantent v1.1 allows attackers to bypass authentication and access sensitive APIs without a token...
Linux Distros Unpatched Vulnerability : CVE-2021-43303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in PJSUA API when calling pjsuacalldump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer...
CVE-2024-57155
The radar wind control engine (v1.0.8) is affected by an incorrect access control vulnerability. This flaw allows attackers to bypass authentication and gain unauthorized access to sensitive APIs without a required token. Currently, there is no information regarding a newer version that contains ...
PT-2025-34156 · Radar · Radar
Name of the Vulnerable Software and Affected Versions: radar version 1.0.8 Description: Incorrect access control in radar version 1.0.8 allows attackers to bypass authentication and access sensitive APIs without a token. The issue enables unauthorized access to sensitive API endpoints...
CVE-2025-8042
Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability affects Firefox 141...
CVE-2025-8042
Firefox for Android allowed a sandboxed iframe without the allow-downloads attribute to start downloads. This vulnerability was fixed in Firefox 141...
CVE-2025-41689 Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
An unauthenticated remote attacker can get access without password protection to the affected device. This enables the unprotected read-only access to the stored measurement data...
BELL-CVE-2025-38516
Bulletin has no description...
PT-2025-33825
Name of the Vulnerable Software and Affected Versions: The Bevy Event service versions through 2025-07-22 Description: The Bevy Event service, used for eBay Seller Events and other activities, is susceptible to account takeover when Single Sign-On SSO is enabled and a victim modifies their...