Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2022-10-26 CVE-2022-3674 Missing Authentication for Critical Function vulnerability in Sanitization Management System Project Sanitization Management System 1.0
A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical.
network
low complexity
sanitization-management-system-project CWE-306
critical
9.8
2022-10-25 CVE-2022-27623 Missing Authentication for Critical Function vulnerability in Synology Diskstation Manager
Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.
network
low complexity
synology CWE-306
critical
9.1
2022-10-25 CVE-2022-38870 Missing Authentication for Critical Function vulnerability in Free5Gc 3.2.1
Free5gc v3.2.1 is vulnerable to Information disclosure.
network
low complexity
free5gc CWE-306
7.5
2022-10-20 CVE-2022-3327 Missing Authentication for Critical Function vulnerability in Ikus-Soft Rdiffweb
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
network
low complexity
ikus-soft CWE-306
critical
9.8
2022-10-19 CVE-2020-23648 Missing Authentication for Critical Function vulnerability in Asus Rt-N12E Firmware 2.0.0.39
Asus RT-N12E 2.0.0.39 is affected by an incorrect access control vulnerability.
network
low complexity
asus CWE-306
7.5
2022-10-13 CVE-2022-35136 Missing Authentication for Critical Function vulnerability in Boodskap IOT Platform 4.4.902
Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.
network
low complexity
boodskap CWE-306
6.5
2022-10-10 CVE-2022-20830 Missing Authentication for Critical Function vulnerability in Cisco Catalyst Sd-Wan Manager and Sd-Wan Vmanage
A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication.
network
low complexity
cisco CWE-306
5.3
2022-10-03 CVE-2022-38817 Missing Authentication for Critical Function vulnerability in Linuxfoundation Dapr Dashboard
Dapr Dashboard v0.1.0 through v0.10.0 is vulnerable to Incorrect Access Control that allows attackers to obtain sensitive data.
network
low complexity
linuxfoundation CWE-306
7.5
2022-09-13 CVE-2022-36780 Missing Authentication for Critical Function vulnerability in Avdorcis Crystal Quality
Avdor CIS - crystal quality Credentials Management Errors.
network
low complexity
avdorcis CWE-306
5.3
2022-09-12 CVE-2022-35572 Missing Authentication for Critical Function vulnerability in Linksys E5350 Firmware 1.0.00.037
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and lower, (and potentially other vendors/devices due to code reuse), the /SysInfo.htm URI does not require a session ID.
network
low complexity
linksys CWE-306
7.5