Lucene search
+L

100 matches found

CVE
CVE
•added 2025/08/22 12:00 a.m.•31 views

CVE-2024-53494

The SpringBootBlog software (also referred to as Kyrie Blog ) version 1.0.0 is vulnerable to an improper access control issue within the preHandle function. This flaw allows an attacker to bypass authentication and gain unauthorized access to sensitive components . To remediate this, users should...

7.5CVSS6.5AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•8 views

Kyrie Blog 安全漏洞

Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...

7.5CVSS6.4AI score0.00357EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•11 views

PT-2025-34447 · Unknown · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...

7.5CVSS7.1AI score0.00357EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•1 views

CVE-2024-53494: Improper Access Control

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/20 7:15 p.m.•17 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 7:15 p.m.•20 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS0.0037EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/20 6:15 p.m.•11 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 6:15 p.m.•17 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•17 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS0.00523EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 3:15 p.m.•55 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS0.00348EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/20 3:15 p.m.•14 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS5.7AI score0.00348EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•2 views

CVE-2024-57152: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•2 views

CVE-2024-53495: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•0 views

CVE-2024-50640: Improper Authentication

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•18 views

jobx 安全漏洞

jobx is an open source make scheduling software from Datavane. A security vulnerability exists in jobx v1.0.1-RELEASE and earlier versions, which stems from an authentication bypass vulnerability in the preHandle function that could lead to unauthorized access to sensitive APIs...

8.8CVSS6.7AI score0.00348EPSS
SaveExploits0References3
CVE
CVE
•added 2025/08/20 12:00 a.m.•39 views

CVE-2024-57152

The personal website my-site v1.0.2 is vulnerable to improper access control within the preHandle function of the cn.luischen.interceptor.BaseInterceptor class. This flaw allows unauthenticated attackers to gain unauthorized access to sensitive components. As a remediation, users should update to...

7.5CVSS6.7AI score0.0037EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•9 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7AI score0.0037EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•10 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

7AI score0.00348EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•12 views

Jeewx-Boot 安全漏洞

Jeewx-Boot is an official JEECG open source open source microsoft housekeeping platform. A security vulnerability exists in Jeewx-Boot version 1.3, which stems from an authentication bypass vulnerability in the preHandle function...

9.8CVSS7AI score0.00523EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•13 views

my-site 安全漏洞

my-site is WinterChenS individual developer's personal website based on springboot2.0 development, integrated: personal home page, personal blog, personal works. A security vulnerability exists in my-site v1.0.2, which stems from improper access control of the preHandle function, which could lead...

7.5CVSS6.6AI score0.0037EPSS
SaveExploits1References3
Rows per page
Query Builder