Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2022-01-19 CVE-2021-23843 Missing Authentication for Critical Function vulnerability in Bosch products
The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices.
local
low complexity
bosch CWE-306
7.8
2022-01-18 CVE-2022-21691 Missing Authentication for Critical Function vulnerability in Onionshare
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
network
low complexity
onionshare CWE-306
4.3
2022-01-14 CVE-2022-23227 Missing Authentication for Critical Function vulnerability in Nuuo Nvrmini2 Firmware
NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication.
network
low complexity
nuuo CWE-306
critical
9.8
2022-01-11 CVE-2021-43974 Missing Authentication for Critical Function vulnerability in Sysaid Itil 20.4.74
An issue was discovered in SysAid ITIL 20.4.74 b10.
network
low complexity
sysaid CWE-306
5.3
2022-01-04 CVE-2021-43832 Missing Authentication for Critical Function vulnerability in Linuxfoundation Spinnaker
Spinnaker is an open source, multi-cloud continuous delivery platform.
network
low complexity
linuxfoundation CWE-306
critical
9.8
2022-01-01 CVE-2021-43333 Missing Authentication for Critical Function vulnerability in Datalogic DXU
The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or disclosure of configuration settings.
network
low complexity
datalogic CWE-306
6.5
2021-12-30 CVE-2021-20150 Missing Authentication for Critical Function vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard.
network
low complexity
trendnet CWE-306
5.3
2021-12-30 CVE-2021-20152 Missing Authentication for Critical Function vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 lacks proper authentication to the bittorrent functionality.
network
low complexity
trendnet CWE-306
6.5
2021-12-30 CVE-2021-20158 Missing Authentication for Critical Function vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability.
network
low complexity
trendnet CWE-306
critical
9.8
2021-12-30 CVE-2021-20161 Missing Authentication for Critical Function vulnerability in Trendnet Tew-827Dru Firmware 2.08B01
Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality.
low complexity
trendnet CWE-306
6.8