Lucene search
+L

96 matches found

Cvelist
Cvelist
•added 2025/08/22 12:00 a.m.•15 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•11 views

PT-2025-34447 · Unknown · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...

7.5CVSS7.1AI score0.00357EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•8 views

Kyrie Blog 安全漏洞

Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...

7.5CVSS6.4AI score0.00357EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•1 views

CVE-2024-53494: Improper Access Control

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/20 7:15 p.m.•16 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 7:15 p.m.•20 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS0.0037EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/20 6:15 p.m.•9 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 6:15 p.m.•15 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•15 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 3:15 p.m.•51 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS0.00348EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/20 3:15 p.m.•13 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS5.7AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•17 views

jobx 安全漏洞

jobx is an open source make scheduling software from Datavane. A security vulnerability exists in jobx v1.0.1-RELEASE and earlier versions, which stems from an authentication bypass vulnerability in the preHandle function that could lead to unauthorized access to sensitive APIs...

8.8CVSS6.7AI score0.00348EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•7 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•11 views

Jeewx-Boot 安全漏洞

Jeewx-Boot is an official JEECG open source open source microsoft housekeeping platform. A security vulnerability exists in Jeewx-Boot version 1.3, which stems from an authentication bypass vulnerability in the preHandle function...

9.8CVSS7AI score0.00523EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•10 views

my-site 安全漏洞

my-site is WinterChenS individual developer's personal website based on springboot2.0 development, integrated: personal home page, personal blog, personal works. A security vulnerability exists in my-site v1.0.2, which stems from improper access control of the preHandle function, which could lead...

7.5CVSS6.6AI score0.0037EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•1 views

CVE-2024-57152: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/20 12:00 a.m.•39 views

CVE-2024-57152

The software my-site v1.0.2 contains an incorrect access control vulnerability in the preHandle function of the cn.luischen.interceptor.BaseInterceptor class. This flaw allows unauthenticated attackers to access sensitive components without proper authentication. To remediate this issue, it is re...

6.7AI score0.0037EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•0 views

CVE-2024-50640: Improper Authentication

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•10 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

7AI score0.00348EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•1 views

CVE-2024-53495: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
Rows per page
Query Builder