Lucene search
+L

83 matches found

Microsoft CVE
Microsoft CVE
added 2025/09/03 11:27 p.m.7 views

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

...

5.5CVSS7AI score0.00167EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/30 6:21 p.m.6 views

CVE-2025-50900

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

9.8CVSS7.4AI score0.00694EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.6 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS7AI score0.00432EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/25 3:15 p.m.5 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS0.00432EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.6 views

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system from getrebuild open source. A security vulnerability exists in Rebuild version v3.7.7, which stems from improper access control in the prehandle function and could lead to bypassing authentication via a specially crafted GET request...

6.5CVSS6.8AI score0.00432EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/25 12:0 a.m.3 views

CVE-2025-50900

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

7.5AI score0.00694EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/08/25 12:0 a.m.13 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

0.00432EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/25 12:0 a.m.22 views

CVE-2024-46412

CVE-2024-46412 affects Rebuild v3.7.7. The issue is an incorrect access control in the prehandle function, allowing an attacker to bypass authentication by sending a crafted GET request to /commons/ip-location. Public sources in the connected documents corroborate this description across Red Hat ...

6.5CVSS7.3AI score0.00432EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.8 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS7.1AI score0.00357EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/22 5:15 p.m.6 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS0.00357EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.12 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS7.5AI score0.00523EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.32 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS7AI score0.00348EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.15 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS7.3AI score0.0037EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/08/22 12:0 a.m.1 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7AI score0.00357EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/22 12:0 a.m.24 views

CVE-2024-53494

CVE-2024-53494 affects SpringBootBlog v1.0.0. The root cause is an incorrect access control in the preHandle function, enabling attackers to access sensitive components without authentication. CVSS v3.1 base score 7.5 ( HIGH ); attack vector NETWORK, no privileges required, no user interaction. E...

7.5CVSS6.5AI score0.00357EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/22 12:0 a.m.11 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.4 views

Kyrie Blog 安全漏洞

Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...

7.5CVSS6.4AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/08/22 12:0 a.m.9 views

PT-2025-34447 · Unknown · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...

7.5CVSS7.1AI score0.00357EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/20 7:15 p.m.11 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/20 7:15 p.m.15 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS0.0037EPSS
SaveExploits1References1
Rows per page
Query Builder