Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2023-06-07 CVE-2020-36724 Missing Authentication for Critical Function vulnerability in Wordable
The Wordable plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.1.
network
low complexity
wordable CWE-306
critical
9.8
2023-06-03 CVE-2023-2781 Missing Authentication for Critical Function vulnerability in Wisetr User Email Verification for Woocommerce
The User Email Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass via authenticate_user_by_email in versions up to, and including, 3.5.0.
network
low complexity
wisetr CWE-306
critical
9.8
2023-06-02 CVE-2023-34094 Missing Authentication for Critical Function vulnerability in Chuanhuchatgpt Project Chuanhuchatgpt
ChuanhuChatGPT is a graphical user interface for ChatGPT and many large language models.
network
low complexity
chuanhuchatgpt-project CWE-306
5.3
2023-06-02 CVE-2023-25780 Missing Authentication for Critical Function vulnerability in Status Powerbpm 2.0
It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM.
low complexity
status CWE-306
5.7
2023-06-02 CVE-2023-30604 Missing Authentication for Critical Function vulnerability in Hitrontech Coda-5310 Firmware 7.2.4.7.1B3
It is identified a vulnerability of insufficient authentication in the system configuration interface of Hitron Technologies CODA-5310.
network
low complexity
hitrontech CWE-306
critical
9.8
2023-05-30 CVE-2022-36249 Missing Authentication for Critical Function vulnerability in Shopbeat Shop Beat Media Player 2.5.95
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs.
network
low complexity
shopbeat CWE-306
5.4
2023-05-30 CVE-2022-4240 Missing Authentication for Critical Function vulnerability in Honeywell Onewireless Network Wireless Device Manager Firmware R322.1
Missing Authentication for Critical Function vulnerability in Honeywell OneWireless allows Authentication Bypass. This issue affects OneWireless version 322.1
network
low complexity
honeywell CWE-306
7.5
2023-05-26 CVE-2023-0116 Missing Authentication for Critical Function vulnerability in Huawei Emui 12.0/12.0.1/13.0.0
The reminder module lacks an authentication mechanism for broadcasts received.
network
low complexity
huawei CWE-306
7.5
2023-05-25 CVE-2023-31594 Missing Authentication for Critical Function vulnerability in IC Realtime Icip-P2012T Firmware 2.420
IC Realtime ICIP-P2012T 2.420 is vulnerable to Incorrect Access Control via an exposed HTTP channel using VLC network.
network
low complexity
ic CWE-306
7.5
2023-05-23 CVE-2023-1837 Missing Authentication for Critical Function vulnerability in Hypr Server
Missing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affects HYPR Server: before 8.0 (with enabled Legacy APIs)
network
low complexity
hypr CWE-306
8.8