Vulnerabilities > Missing Authentication for Critical Function

DATE CVE VULNERABILITY TITLE RISK
2020-09-10 CVE-2020-5780 Missing Authentication for Critical Function vulnerability in Icegram Email Subscribers & Newsletters
Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticated email forgery/spoofing.
network
low complexity
icegram CWE-306
5.3
2020-09-03 CVE-2020-11579 Missing Authentication for Critical Function vulnerability in Chadhaajay PHPkb 9.0
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition.
network
low complexity
chadhaajay CWE-306
7.5
2020-09-02 CVE-2020-12621 Missing Authentication for Critical Function vulnerability in Teamwire 5.3.0
The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component.
low complexity
teamwire CWE-306
6.1
2020-08-31 CVE-2020-25048 Missing Authentication for Critical Function vulnerability in Google Android 10.0
An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software.
low complexity
google CWE-306
4.6
2020-08-31 CVE-2020-24363 Missing Authentication for Critical Function vulnerability in Tp-Link Tl-Wa855Re Firmware 20200415
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset and reboot.
low complexity
tp-link CWE-306
8.8
2020-08-31 CVE-2020-20627 Missing Authentication for Critical Function vulnerability in Givewp
The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change.
network
low complexity
givewp CWE-306
5.3
2020-08-26 CVE-2018-1501 Missing Authentication for Critical Function vulnerability in IBM Security Guardium 10.5/10.6/11.0
IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls.
network
low complexity
ibm CWE-306
7.5
2020-08-26 CVE-2020-15483 Missing Authentication for Critical Function vulnerability in Niscomed M1000 Multipara Patient Monitor Firmware
An issue was discovered on Nescomed Multipara Monitor M1000 devices.
low complexity
niscomed CWE-306
6.8
2020-08-21 CVE-2020-24051 Missing Authentication for Critical Function vulnerability in Moog Exvf5C-2 Firmware and Exvp7C2-3 Firmware
The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations.
network
low complexity
moog CWE-306
critical
9.8
2020-08-17 CVE-2020-3448 Missing Authentication for Critical Function vulnerability in Cisco Cyber Vision Center
A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication and access internal services that are running on an affected device.
network
low complexity
cisco CWE-306
5.8