CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- hitachi infrastructure analytics advisor, ops center analyzer +1 moreAuthorization bypass vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer7.1 High
- kantar media wm2, sound4 big voice2 firmware, big voice4 firmware +12 more +14 moreSOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Factory Reset Vulnerability8.8 High
- d-link dsl-124 wireless n300 adsl2+, dlink dsl-124 firmware +1 moreD-Link DSL-124 ME_1.00 Backup Configuration File Disclosure via Unauthenticated Request8.8 High
- db elettronica telecomunicazioni spa screen sft dab 600/c, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Reset Board Config8.7 High
- db elettronica telecomunicazioni spa screen sft dab 600/c, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Password Change9.3 Critical
- db elettronica telecomunicazioni spa screen sft dab 600/c, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Erase Account9.3 Critical
- db elettronica telecomunicazioni spa screen sft dab 600/c, dbbroadcast sft dab 600\/c firmware +1 moreScreen SFT DAB 600/C Firmware 1.9.3 Authentication Bypass Admin Password Change9.3 Critical
- sharp display solutions, ltd. media player mp-01, sharp mp-01 firmware +1 moreMissing Authentication for Critical Function vulnerability in Sharp Display Solutions Media...9.2 Critical
- xiongmaitech xm530v200 x6-weq 8m firmwareAuthentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8...9.8 Critical
- mojofywp wp affiliate disclosureWordPress WP Affiliate Disclosure plugin <= 1.2.6 - Broken Access Control + CSRF vulnerability4.3 Medium
- tp-link tapo c200, tp link systems inc. tapo c100 v5, tapo c425 v1.2 +1 more +3 moreUnauthenticated Access to connectAP API Endpoint on Tapo C100, C200 & C4258.7 High
- linksys e9450-sg firmware, e9450-sg +1 moreBypass Authentication8.8 High
- wodesys wd-r608u, wdr122b v2.0, wdr28 +2 moreMissing authorizations for admin panel password change in WODESYS WD-R608U router7.1 High
- wodesys wd-r608u, wdr122b v2.0, wdr28 +2 moreMissing Authentication for Critical Function in WODESYS WD-R608U router8.7 High
- mintplexlabs anythingllmAn authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces...5.3 Medium
- ollamaOllama Platform has missing authentication enabling attackers to perform model management operations9.8 Critical
- apple ipados, macos, visionos +2 more +4 moreA configuration issue was addressed with additional restrictions. This issue is fixed in visionOS...9.8 Critical
- world wide broadcast network avideoAVideo < 20.1 ImageGallery Plugin Unauthenticated File Upload and Deletion9.3 Critical
- d-link dap-1325, dlink dap-1325 firmware +1 moreD-Link DAP-1325 Hardware A1 Unauthenticated Configuration Download8.7 High
- enterprisedb hybrid manager - innovation, hybrid manager - lts, hybrid manager +2 moreEDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access...7.0 High
- haxxorsid stock-management-systemhaxxorsid Stock-Management-System employees missing authentication6.9 Medium
- icegram email subscribers & newsletters – email marketing, post notifications & newsletter plugin for wordpressEmail Subscribers & Newsletters <= 5.9.10 - Missing Authentication to Unauthenticated Action Scheduler Task Execution5.3 Medium
- spacex starlink dishSpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow...4.2 Medium
- siklu multihaul tg seriesSiklu MultiHaul TG Series <= 2.0.0 Unauthenticated Credential Disclosure Vulnerability8.7 High
- eibiz i-media server digital signageEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability9.3 Critical
- eibiz i-media server digital signageEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation9.3 Critical
- d-link dcs-f5614-l1D-Link CCTV camera model DCS-F5614-L1 Missing Authentication for Critical Function9.3 Critical
- jbl live pro 2 tws, tune flex +1 moreJBL: Improper BLE security configurations and lack of authentication on the device's GATT server8.8 High
- meatmeet pro wifi \& bluetooth meat thermometer firmwareAn unauthenticated attacker within proximity of the Meatmeet device can issue several commands...6.5 Medium
- meatmeet pro wifi \& bluetooth meat thermometer firmwareAn unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized...8.8 High
- minidvblinux, minidvblinux simple videodiskrecorder protocol svdrp (svdrpsend.sh) exploit +1 moreMiniDVBLinux 5.4 Simple VideoDiskRecorder Protocol Remote Code Execution6.9 Medium
- minidvblinuxMiniDVBLinux 5.4 Unauthenticated Live Stream Disclosure via tv_action.sh8.7 High
- minidvblinux, minidvblinux change root password poc +1 moreMiniDVBLinux 5.4 Unauthenticated Root Password Change via System Setup9.3 Critical
- selea targa ip ocr-anpr camera, carplateserver, izero box full firmware +10 more +12 moreSelea Targa IP Camera Developer Backdoor Configuration Overwrite9.3 Critical
- selea targa ip ocr-anpr camera, carplateserver, izero box full firmware +10 more +12 moreSelea Targa IP Camera Unauthenticated Stream Disclosure8.7 High
- commax co., ltd. smart home ruvie cctv bridge dvr serviceCOMMAX Smart Home Ruvie CCTV Bridge DVR Service RTSP Credentials Disclosure8.7 High
- commax co., ltd. smart home ruvie cctv bridge dvr serviceCOMMAX Smart Home Ruvie CCTV Bridge DVR Service Config Write / DoS8.7 High
- entrust corporation instant financial issuance (if)Entrust Instant Financial Issuance (IFI) Legacy Remoting Service .NET Remoting RCE9.3 Critical
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Storage VSP Driver Elevation of Privilege Vulnerability7.8 High
- netgear c6220, c6230, c6220 firmware +1 more +3 moreDenial of Service Vulnerability in NETGEAR C6220 and C62305.0 Medium
- sap se netweaver internet communication frameworkMissing Authentication check in SAP NetWeaver Internet Communication Framework6.6 Medium
- google androidIn isValidMediaUri of SettingsProvider.java, there is a possible cross user media read due to a...5.5 Medium
- infinera mtc-9, nokia infinera mtc-9 firmware +1 moreImproper configuration of SSH service in Infinera MTC-99.8 Critical
- infinera mtc-9, nokia infinera mtc-9 firmware +1 moreRemote shell service (RSH) in Infinera MTC-99.8 Critical
- fanvil x210 firmwareFile upload vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local...4.3 Medium
- airkeyboardapp airkeyboard ios appAirKeyboard iOS App 1.0.5 - Remote Input Injection8.8 High
- ping identity one-time passcode integration kit for pingfederateAuthentication Bypass in OTP (One-time Passcode) IdP Adapter Integration Kit8.6 High
- synology beedrive, beedrive for desktop +1 moreMissing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for...7.8 High
- jxlindia jxl 9 inch car android double din player firmwareAn issue in the Bluetooth Human Interface Device (HID) of JXL 9 Inch Car Android Double Din...7.6 High
- smallstep step-caStep CA Has Authorization Bypass in ACME and SCEP Provisioners10.0 Critical
- Show moreLoading…