Lucene search
+L

246 matches found

CVE
CVE
•added 2025/10/10 7:02 p.m.•49 views

CVE-2025-11581

PowerJob (up to version 5.1.2) contains a security vulnerability in the OpenAPIController’s /openApi/runJob endpoint. The issue is due to missing authorization in that code path, allowing a remote attacker to manipulate the request without authentication. Multiple connected sources (NVD, Red Hat ...

7.5CVSS5.2AI score0.00458EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2025/10/10 7:02 p.m.•5 views

CVE-2025-11581

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicl...

7.5CVSS5.2AI score0.00458EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/10/10 7:02 p.m.•6 views

CVE-2025-11581 PowerJob OpenAPIController runJob authorization

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicl...

6.9CVSS5.2AI score0.00458EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/10/10 7:02 p.m.•18 views

CVE-2025-11581 PowerJob OpenAPIController runJob authorization

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicl...

6.9CVSS5.6AI score
SaveExploits0References7
Snyk
Snyk
•added 2025/10/10 6:43 p.m.•7 views

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the list function in UserInfoController.java. An attacker can access sensitive user information by sending unauthorized requests remotely. Remediation There is no fixed version for...

6.9CVSS5.7AI score0.0109EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/10/10 6:31 p.m.•25 views

PowerJob has Missing Authorization in its /user/list file

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited...

6.9CVSS5.3AI score0.0109EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2025/10/10 6:31 p.m.•21 views

GHSA-87XJ-GHMC-C3XQ PowerJob has Missing Authorization in its /user/list file

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited...

6.9CVSS5.5AI score0.0109EPSS
SaveExploits0References6
NVD
NVD
•added 2025/10/10 6:15 p.m.•21 views

CVE-2025-11580

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS0.0109EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/10/10 6:02 p.m.•19 views

CVE-2025-11580 PowerJob list authorization

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS5.7AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/10/10 6:02 p.m.•3 views

CVE-2025-11580 PowerJob list authorization

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS5.3AI score0.0109EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2025/10/10 6:02 p.m.•15 views

CVE-2025-11580

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS5.4AI score0.0109EPSS
SaveExploits0References6
EUVD
EUVD
•added 2025/10/10 6:02 p.m.•29 views

EUVD-2025-33758

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited...

6.9CVSS5.4AI score0.0109EPSS
SaveExploits0References5
CVE
CVE
•added 2025/10/10 6:02 p.m.•96 views

CVE-2025-11580

PowerJob up to version 5.1.2 contains broken access control in the /user/list function, allowing remote unauthorized access. Multiple sources (NVD, Red Hat, CIRCL, nuclei template, PTSecurity, CNNVD, CVE CVE-2025-11580) describe that the vulnerability enables remote exploitation with public explo...

6.9CVSS5.3AI score0.0109EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2025/10/10 6:02 p.m.•35 views

CVE-2025-11580 PowerJob list authorization

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS0.0109EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•37 views

PT-2025-41581

Name of the Vulnerable Software and Affected Versions PowerJob versions through 5.1.2 Description A flaw exists in PowerJob that relates to missing authorization within the function list of the /user/list file. This issue can be exploited remotely. The exploit is publicly available. The vulnerabl...

6.9CVSS5.7AI score0.0109EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•19 views

PowerJob security vulnerabilities

PowerJob is an open source distributed computing and job scheduling framework from PowerJob Open Source that allows developers to easily schedule tasks in their applications. A security vulnerability exists in PowerJob 5.1.2 and earlier versions, which stems from a lack of authorization for the...

7.5CVSS5.8AI score0.00458EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/10/10 12:00 a.m.•30 views

PT-2025-41589

Name of the Vulnerable Software and Affected Versions PowerJob versions through 5.1.2 Description A security issue has been identified in PowerJob. The problem relates to missing authorization within the /openApi/runJob file of the OpenAPIController component. This allows for remote attacks. The...

6.9CVSS5.6AI score0.00458EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•7 views

CVE-2025-11581: Missing Authorization

A security vulnerability has been detected in PowerJob up to 5.1.2. This vulnerability affects unknown code of the file /openApi/runJob of the component OpenAPIController. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicl...

7.5CVSS5.3AI score0.00458EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/10 12:00 a.m.•3 views

CVE-2025-11580: Missing Authorization

A weakness has been identified in PowerJob up to 5.1.2. This affects the function list of the file /user/list. This manipulation causes missing authorization. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks...

6.9CVSS5.4AI score0.0109EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/10/10 12:00 a.m.•22 views

PowerJob security vulnerabilities

PowerJob is an open source distributed computing and job scheduling framework from PowerJob Open Source that allows developers to easily schedule tasks in their applications. A security vulnerability exists in PowerJob 5.1.2 and earlier versions, which stems from a lack of authorization checking ...

6.9CVSS5.8AI score0.0109EPSS
SaveExploits0References4
Rows per page
Query Builder