Lucene search
+L

3150 matches found

RedhatCVE
RedhatCVE
added 2025/04/30 10:9 a.m.20 views

CVE-2025-4015

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS6.7AI score0.00758EPSS
SaveExploits0References1
Veracode
Veracode
added 2025/04/30 4:28 a.m.7 views

Improper Access Control

moodle/moodle is vulnerable to Improper Access Control. The vulnerability is due to missing authentication enforcement, which allows users to enroll in courses without completing two-step verification...

4.3CVSS6.8AI score0.00249EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2025/04/28 12:15 p.m.15 views

CVE-2025-4019

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing...

9.8CVSS0.00662EPSS
SaveExploits0References4
NVD
NVD
added 2025/04/28 12:15 p.m.14 views

CVE-2025-4018

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads t...

7.5CVSS0.00762EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/28 12:0 p.m.62 views

CVE-2025-4019

The CVE-2025-4019 entry concerns Novel-Plus (versions from 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160). The flaw is in the GeneratorController.java, specifically the genCode function, where manipulation leads to missing authentication. This enables a remote attacker to exploit the vu...

9.8CVSS7.2AI score0.00662EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/04/28 12:0 p.m.27 views

CVE-2025-4019 20120630 Novel-Plus GeneratorController.java genCode missing authentication

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing...

7.5CVSS0.00662EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/28 12:0 p.m.7 views

CVE-2025-4019 20120630 Novel-Plus GeneratorController.java genCode missing authentication

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing...

7.5CVSS7.2AI score0.00662EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/04/28 11:31 a.m.34 views

CVE-2025-4018 20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads t...

6.9CVSS0.00762EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/04/28 11:31 a.m.16 views

CVE-2025-4018 20120630 Novel-Plus CrawlController.java addCrawlSource missing authentication

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads t...

6.9CVSS6.7AI score0.00762EPSS
SaveExploits1References4
CVE
CVE
added 2025/04/28 11:31 a.m.62 views

CVE-2025-4018

Summary of CVE-2025-4018 (Novel-Plus) : A critical vulnerability affects Novel-Plus versions up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160, specifically the function addCrawlSource in novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The root issue is a missing authent...

7.5CVSS5.3AI score0.00762EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2025/04/28 10:15 a.m.18 views

CVE-2025-4015

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

7.5CVSS0.00758EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/04/28 10:0 a.m.10 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS6.7AI score0.00758EPSS
SaveExploits0References4
CVE
CVE
added 2025/04/28 10:0 a.m.66 views

CVE-2025-4015

CVE-2025-4015 affects Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160. The root cause is an access control error in the function list of SessionController.java, causing missing authentication and enabling remote exploitation. Public exploit disclosure has occurred. A...

7.5CVSS5.3AI score0.00758EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2025/04/28 10:0 a.m.33 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS0.00758EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.12 views

PT-2025-18060 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical issue has been found that affects the function list of the file...

6.9CVSS5.2AI score0.00758EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.8 views

PT-2025-18063 · Unknown · 20120630 Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical vulnerability has been found in Novel-Plus, affecting the function addCrawlSource of the file...

6.9CVSS5.1AI score0.00762EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/04/26 10:59 p.m.19 views

CVE-2025-46275

WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials...

9.8CVSS7.1AI score0.00561EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/24 10:58 p.m.6 views

CVE-2025-46275 Planet Technology Network Products Missing Authentication for Critical Function

WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials...

9.8CVSS7.3AI score0.00561EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/24 10:58 p.m.28 views

CVE-2025-46275 Planet Technology Network Products Missing Authentication for Critical Function

WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials...

9.8CVSS0.00561EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/22 4:56 p.m.6 views

GO-2025-3620 Mattermost Missing Authentication for Critical Function in github.com/mattermost/mattermost-server

Mattermost Missing Authentication for Critical Function in github.com/mattermost/mattermost-server...

2.7CVSS6.9AI score0.0023EPSS
SaveExploits0References3
Rows per page
Query Builder