Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2023-06-02 CVE-2023-34094 Missing Authentication for Critical Function vulnerability in Chuanhuchatgpt Project Chuanhuchatgpt
ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models.
network
low complexity
chuanhuchatgpt-project CWE-306
5.3
2023-05-30 CVE-2022-36249 Missing Authentication for Critical Function vulnerability in Shopbeat Shop Beat Media Player 2.5.95
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs.
network
low complexity
shopbeat CWE-306
5.4
2023-05-30 CVE-2022-4240 Missing Authentication for Critical Function vulnerability in Honeywell Onewireless Network Wireless Device Manager Firmware R322.1
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
network
low complexity
honeywell CWE-306
7.5
2023-05-26 CVE-2023-0116 Missing Authentication for Critical Function vulnerability in Huawei Emui 12.0/12.0.1/13.0.0
The reminder module lacks an authentication mechanism for broadcasts received.
network
low complexity
huawei CWE-306
7.5
2023-05-25 CVE-2023-31594 Missing Authentication for Critical Function vulnerability in IC Realtime Icip-P2012T Firmware 2.420
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.
network
low complexity
ic CWE-306
7.5
2023-05-23 CVE-2023-1837 Missing Authentication for Critical Function vulnerability in Hypr Server
Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs)
network
low complexity
hypr CWE-306
8.8
2023-05-23 CVE-2023-23545 Missing Authentication for Critical Function vulnerability in multiple products
Missing authentication for critical function exists in T&D Corporation and ESPEC MIC CORP.
network
low complexity
tandd especmic CWE-306
5.3
2023-05-19 CVE-2023-2704 Missing Authentication for Critical Function vulnerability in Vibethemes BP Social Connect
The BP Social Connect plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.5.
network
low complexity
vibethemes CWE-306
critical
9.8
2023-05-18 CVE-2023-20003 Missing Authentication for Critical Function vulnerability in Cisco products
A vulnerability in the social login configuration option for the guest users of Cisco Business Wireless Access Points (APs) could allow an unauthenticated, adjacent attacker to bypass social login authentication.
low complexity
cisco CWE-306
8.8
2023-05-12 CVE-2023-23444 Missing Authentication for Critical Function vulnerability in Sick products
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
network
low complexity
sick CWE-306
8.2