Lucene search
K

83 matches found

Microsoft CVE
Microsoft CVE
added 2025/09/03 11:27 p.m.2 views

drivers: staging: rtl8192eu: Fix deadlock in rtw_joinbss_event_prehandle

...

5.5CVSS7AI score0.00156EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/08/30 6:21 p.m.2 views

CVE-2025-50900

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

9.8CVSS7.4AI score0.00648EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.2 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS7AI score0.00406EPSS
Exploits0References1
NVD
NVD
added 2025/08/25 3:15 p.m.1 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

6.5CVSS0.00406EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/08/25 12:0 a.m.2 views

Rebuild 安全漏洞

Rebuild is a highly customizable enterprise management system from getrebuild open source. A security vulnerability exists in Rebuild version v3.7.7, which stems from improper access control in the prehandle function and could lead to bypassing authentication via a specially crafted GET request...

6.5CVSS6.8AI score0.00406EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/25 12:0 a.m.8 views

CVE-2024-46412

Incorrect access control in the prehandle function of Rebuild v3.7.7 allows attackers to bypass authentication via a crafted GET request sent to /commons/ip-location...

0.00406EPSS
Exploits0References2
CVE
CVE
added 2025/08/25 12:0 a.m.17 views

CVE-2024-46412

CVE-2024-46412 affects Rebuild v3.7.7. The issue is an incorrect access control in the prehandle function, allowing an attacker to bypass authentication by sending a crafted GET request to /commons/ip-location. Public sources in the connected documents corroborate this description across Red Hat ...

6.5CVSS7.3AI score0.00406EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/08/25 12:0 a.m.2 views

CVE-2025-50900

An issue was discovered in getrebuild/rebuild 4.0.4. The affected source code class is com.rebuild.web.RebuildWebInterceptor, and the affected function is preHandle In the filter code, use CodecUtils.urlDecoderequest.getRequestURI to obtain the URL-decoded request path, and then determine whether...

7.5AI score0.00648EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.3 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS7.1AI score0.00336EPSS
Exploits0References1
NVD
NVD
added 2025/08/22 5:15 p.m.2 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS0.00336EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.16 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS7AI score0.00328EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.5 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS7.3AI score0.00348EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/22 12:22 a.m.5 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS7.5AI score0.00492EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/22 12:0 a.m.1 views

Kyrie Blog 安全漏洞

Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...

7.5CVSS6.4AI score0.00336EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/22 12:0 a.m.6 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

0.00336EPSS
Exploits0References2
CVE
CVE
added 2025/08/22 12:0 a.m.16 views

CVE-2024-53494

CVE-2024-53494 affects SpringBootBlog v1.0.0. The root cause is an incorrect access control in the preHandle function, enabling attackers to access sensitive components without authentication. CVSS v3.1 base score 7.5 ( HIGH ); attack vector NETWORK, no privileges required, no user interaction. E...

7.5CVSS6.5AI score0.00336EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/22 12:0 a.m.4 views

PT-2025-34447 · Unknown · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...

7.5CVSS7.1AI score0.00336EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/08/22 12:0 a.m.1 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7AI score0.00336EPSS
Exploits0References2
NVD
NVD
added 2025/08/20 7:15 p.m.3 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS0.00348EPSS
Exploits1References1
OSV
OSV
added 2025/08/20 7:15 p.m.0 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder