Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol.Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Oct 13, 2026
- High8.7OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via…Oct 11, 2026
- Critical9.8In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Pr…Oct 7, 2026
- High8.8MikroTik RouterOS Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.6%Sep 5, 2026
- Critical9.3MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in the optional MOOSDB HTTP server that allows unauthenticated clients to write variables.Sep 3, 2026
- High8.8PaperCut NG/MF Missing Authentication for Critical Function VulnerabilityKEVEPSS 85.6%Aug 28, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…Aug 24, 2026
- High8.8RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint.Aug 24, 2026
- High7.1Firmware in KAON PG5298A and PG5298B routers allow an unauthenticated user to query a specific endpoint and acquire sensitive information such as a password to the adm…Aug 24, 2026
- High8.5DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, inc…Aug 24, 2026
- High8.7The HTTP media server running on DJI drones serves stored photos and videos through the endpoint without authenticating the requesting client.Aug 24, 2026
- Critical9.3TrueConf Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.5%Aug 19, 2026
- Critical9.8Microsoft SharePoint Server Missing Authentication for Critical Function VulnerabilityKEVEPSS 1.0%Jul 14, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityKEVEPSS 0.8%Jul 8, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.7%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.9%Jun 10, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityKEVEPSS 0.8%May 28, 2026
- Low2.0All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.Apr 30, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.5%Apr 29, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityKEVEPSS 37.9%Apr 9, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- High7.5Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityKEVEPSS 88.3%Feb 10, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.2%Jan 23, 2026
- High7.8Android Framework Privilege Escalation VulnerabilityKEVEPSS 0.3%Dec 2, 2025
69 records · page 1 of 3
PreviousNext