Falhas do tipo CWE-306

1.711 resultados
CVE-2026-24731CRITICALEV2GO ev2go.io Missing Authentication for Critical FunctionEPSS 0.6%CVE-2019-25632MEDIUMphpFileManager 1.7.8 Local File Inclusion via index.phpEPSS 0.6%CVE-2023-53968CRITICALScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase AccountEPSS 0.6%CVE-2023-6368MEDIUMWhatsUp Gold Unauthenticated Access to an API EndpointEPSS 0.6%CVE-2024-1491HIGHElectrolink FM/DAB/TV Transmitter Missing Authentication for Critical FunctionEPSS 0.6%CVE-2025-30410CRITICALSensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud AEPSS 0.6%CVE-2022-43761CRITICALLack of authentication when managing APROL databaseEPSS 0.6%CVE-2026-1633CRITICALSynectix LAN 232 TRIO Missing Authentication for Critical FunctionEPSS 0.5%CVE-2024-9984CRITICALRagic Enterprise Cloud Database - Missing AuthenticationEPSS 0.5%CVE-2023-54344CRITICALEclipse Equinox OSGi 3.7.2 Remote Code Execution via ConsoleEPSS 0.5%CVE-2024-42462CRITICALBypass multifactor authenticationEPSS 0.5%CVE-2023-3104MEDIUMMissing Authentication for Critical Function in Unitree Robotics A1EPSS 0.5%CVE-2026-2065MEDIUMFlycatcher Toys smART Pixelator Bluetooth Low Energy missing authenticationEPSS 0.5%CVE-2026-12183CRITICALNefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability EPSS 0.5%CVE-2023-1837HIGHMissing Authentication for critical function vulnerability in HYPR Server allows Authentication Bypass when using Legacy APIs.This issue affEPSS 0.5%CVE-2023-24934MEDIUMMicrosoft Defender Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-8350CRITICALAuthentication Bypass with Redirect in BiEticaret Software's BiEticaret CMSEPSS 0.5%CVE-2025-70141CRITICALSourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in ajax.php. The AJAX dispatcher does not enfoEPSS 0.5%CVE-2026-40620CRITICALSenseLive X3050 Missing authentication for critical functionEPSS 0.5%CVE-2024-7940HIGHThe product exposes a service that is intended for local only to all network interfaces without any authentication.EPSS 0.5%