Lucene search
+L

14178 matches found

Cvelist
Cvelist
•added 2025/04/28 10:00 a.m.•49 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS0.0083EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2025/04/28 10:00 a.m.•13 views

CVE-2025-4015 20120630 Novel-Plus SessionController.java list missing authentication

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

6.9CVSS5.6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•28 views

PT-2025-18061

Name of the Vulnerable Software and Affected Versions Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description A critical vulnerability has been found in Novel-Plus, affecting the deleteIndex function of the LogController.java file. This leads to improper...

9.1CVSS5.4AI score0.00496EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•24 views

PT-2025-18060

Name of the Vulnerable Software and Affected Versions Novel-Plus versions 20120630 through 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description A critical issue has been found that affects the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.jav...

7.5CVSS5.4AI score0.0083EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•24 views

PT-2025-18066 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical vulnerability was found in Novel-Plus, affecting the genCode function of the GeneratorController.java file. The manipulation leads to missing...

7.5CVSS6.5AI score0.00704EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•18 views

PT-2025-18063 · Unknown · 20120630 Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A critical vulnerability has been found in Novel-Plus, affecting the function addCrawlSource of the file...

6.9CVSS5.2AI score0.00834EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2025/04/28 12:00 a.m.•25 views

PT-2025-18062 · Unknown · 20120630 Novel-Plus

Name of the Vulnerable Software and Affected Versions: Novel-Plus versions 20120630 up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160 Description: A vulnerability was found in Novel-Plus, affecting the function list of the file...

5.3CVSS4.7AI score0.00554EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•19 views

Novel-Plus Access Control Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has an access control error vulnerability that stems from a lack of authentication...

7.5CVSS5.8AI score0.0083EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•18 views

Novel-Plus security vulnerabilities

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has a security vulnerability that stems from a lack of authentication...

9.8CVSS7.2AI score0.00704EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•23 views

Novel-Plus security vulnerabilities

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has a security vulnerability that stems from improper authorization...

9.1CVSS5.8AI score0.00496EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•16 views

Novel-Plus Access Control Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has an access control error vulnerability that stems from a lack of authentication...

7.5CVSS5.8AI score0.00834EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•19 views

Novel-Plus security vulnerabilities

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. Novel-Plus has a security vulnerability that stems from improper authorization...

6.5CVSS5.3AI score0.00554EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•10 views

CVE-2025-4019: Missing Authentication for Critical Function

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Affected is the function genCode of the file novel-admin/src/main/java/com/java2nb/common/controller/GeneratorController.java. The manipulation leads to missing...

9.8CVSS6.7AI score0.00704EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•7 views

CVE-2025-4018: Missing Authentication for Critical Function

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This issue affects the function addCrawlSource of the file novel-crawl/src/main/java/com/java2nb/novel/controller/CrawlController.java. The manipulation leads t...

7.5CVSS5.3AI score0.00834EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•9 views

CVE-2025-4017: Improper Authorization

A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This vulnerability affects the function list of the file nnovel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper...

6.5CVSS4.8AI score0.00554EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•8 views

CVE-2025-4016: Improper Authorization

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. This affects the function deleteIndex of the file novel-admin/src/main/java/com/java2nb/common/controller/LogController.java. The manipulation leads to improper...

9.1CVSS5.3AI score0.00496EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/28 12:00 a.m.•6 views

CVE-2025-4015: Missing Authentication for Critical Function

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. It has been rated as critical. Affected by this issue is the function list of the file novel-system/src/main/java/com/java2nb/system/controller/SessionController.java. The manipulation leads to missin...

7.5CVSS5.3AI score0.0083EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•21 views

RefindPlus security vulnerabilities

RefindPlus is RefindPlusRepo open source a boot manager for Mac and PC. A security vulnerability exists in RefindPlus version 0.14.2.AB, which stems from a null pointer dereference due to the function InternalApfsTranslateBlock operation in the file RPApfsIo.c. The vulnerability is caused by a nu...

6.8CVSS5.5AI score0.00198EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/04/28 12:00 a.m.•42 views

Ubuntu 24.04 LTS : Linux kernel (Azure, N-Series) vulnerabilities (USN-7468-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7468-1 advisory. Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker...

9.8CVSS7.4AI score0.04117EPSS
SaveExploits9References734
RedhatCVE
RedhatCVE
•added 2025/04/27 7:00 a.m.•29 views

CVE-2025-3866

The Add Google +1 Plus one social share Button plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the google-plus-one-share-button page. This makes it possible for unauthenticated...

6.1CVSS6.5AI score0.00315EPSS
SaveExploits0References1
Rows per page
Query Builder