CWE-306

A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sens

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse speci

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as problematic. Affected by

Improper authentication vulnerability in exists in multiple printers and scanners which implement Web Based Management p

aEnrich Technology a+HRD's functionality for front-end retrieval of system configuration values lacks proper restriction

An unauthenticated attacker can reset the board and stop transmitter operations by sending a specially-crafted GET requ

Triangle MicroWorks SCADA Data Gateway get_config Missing Authentication Information Disclosure Vulnerability. This vuln

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. The vulnerability allows unauthorized access t

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properl

A vulnerability has been identified in SIMATIC Reader RF610R CMIIT (6GT2811-6BC10-2AA0) (All versions < V4.2), SIMATIC R

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote

Vilo 5 Mesh WiFi System <= 5.16.1.33 lacks authentication in the Boa webserver, which allows remote, unauthenticated att

The Get Quote For Woocommerce – Request A Quote For Woocommerce plugin for WordPress is vulnerable to unauthorized acces

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.

A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by def

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earli

Admin authentication can be bypassed with some specific invalid credentials, which allows logging in with an administrat

Synapse is an open-source Matrix homeserver. Synapse before version 1.106 allows, by design, unauthenticated remote part

A Missing Authentication for Critical Function issue affecting the HTTP service running on the DJI Mavic Mini 3 Pro on t

IBM System Storage DS8900F 89.22.19.0, 89.30.68.0, 89.32.40.0, 89.33.48.0, 89.40.83.0, and 89.40.93.0 could allow a remo

Rubygems.org is the Ruby community's gem hosting service. Rubygems.org users with MFA enabled would normally be protecte

A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks J

Certain Anpviz products allow unauthenticated users to modify or disable camera related settings such as microphone volu

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentic

A vulnerability, which was classified as problematic, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is an

A broken access control vulnerability exists in the latest version of lunary-ai/lunary. The `saml.ts` file allows a user

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows new identities from configur

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Busines

Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function

In JetBrains YouTrack before 2024.3.51866 improper access control allowed listing of project names during app import wit

Incorrect access control in the fingerprint authentication mechanism of Bitdefender Mobile Security v4.11.3-gms allows a

Multiple FCNT Android devices provide the original security features such as "privacy mode" where arbitrary applications

In JetBrains YouTrack before 2024.3.51866 unauthenticated database backup download was possible via vulnerable query par

Missing Authentication for Critical Function vulnerability in EMTA Grup PDKS allows Exploiting Incorrectly Configured Ac

An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (T

The vulnerability allows an attacker to bypass the authentication requirements for a specific PAM endpoint.

Insufficient authentication in user account management in Yugabyte Platform allows local network attackers with a compro

The “socket” module provides a pure-Python fallback to the socket.socketpair() function for platforms that don’t suppo

Missing Authentication for Critical Function, Missing Authorization vulnerability in Yordam Information Technology Mobil

TEM Opera Plus FM Family Transmitter allows access to an unprotected endpoint that allows MPFS File System binary image

The affected product is vulnerable to an attacker being able to use commands without providing a password which may allo

Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows

Improper control of framework service permissions with possibility of some sensitive device information leakage.

Improper handling of WiFi information by framework services can allow certain malicious applications to obtain sensitive

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim

A device takeover vulnerability exists in the Rockwell Automation Power Monitor 1000. This vulnerability allows configur

Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - ver