Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2021-03-10 CVE-2021-28122 Missing Authentication for Critical Function vulnerability in Open5Gs
A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1.
network
low complexity
open5gs CWE-306
critical
9.8
2021-03-09 CVE-2020-27225 Missing Authentication for Critical Function vulnerability in Eclipse Platform
In versions 4.18 and earlier of the Eclipse Platform, the Help Subsystem does not authenticate active help requests to the local help web server, allowing an unauthenticated local attacker to issue active help commands to the associated Eclipse Platform process or Eclipse Rich Client Platform process.
local
low complexity
eclipse CWE-306
7.8
2021-03-05 CVE-2021-26705 Missing Authentication for Critical Function vulnerability in Squarebox Catdv
An issue was discovered in SquareBox CatDV Server through 9.2.
network
low complexity
squarebox CWE-306
critical
9.1
2021-03-05 CVE-2021-27963 Missing Authentication for Critical Function vulnerability in Sfcyazilim Sonlogger 4.1.3/4.2.3/5.1.3
SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin).
network
low complexity
sfcyazilim CWE-306
8.2
2021-03-03 CVE-2021-27215 Missing Authentication for Critical Function vulnerability in Genua Genuagate 10.1/9.0/9.6.0
An issue was discovered in genua genugate before 9.0 Z p19, 9.1.x through 9.6.x before 9.6 p7, and 10.x before 10.1 p4.
network
low complexity
genua CWE-306
critical
9.8
2021-02-27 CVE-2019-25020 Missing Authentication for Critical Function vulnerability in Scytl Secure Vote 2.1
An issue was discovered in Scytl sVote 2.1.
network
low complexity
scytl CWE-306
7.5
2021-02-26 CVE-2019-11684 Missing Authentication for Critical Function vulnerability in Bosch products
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system.
network
low complexity
bosch CWE-306
critical
9.8
2021-02-24 CVE-2021-20662 Missing Authentication for Critical Function vulnerability in Contec Sv-Cpt-Mc310 Firmware 6.0/6.00
Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors.
network
low complexity
contec CWE-306
7.5
2021-02-17 CVE-2020-36245 Missing Authentication for Critical Function vulnerability in Gramaddict
GramAddict through 1.2.3 allows remote attackers to execute arbitrary code because of use of UIAutomator2 and ATX-Agent.
low complexity
gramaddict CWE-306
8.8
2021-02-17 CVE-2021-26697 Missing Authentication for Critical Function vulnerability in Apache Airflow 2.0.0
The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0.
network
low complexity
apache CWE-306
5.3