Lucene search
+L

114 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/22 12:00 a.m.•6 views

CVE-2024-53494: Improper Access Control

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.00357EPSS
SaveExploits0References1
Mend
Mend
•added 2025/08/22 12:00 a.m.•8 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

8.7CVSS0.00357EPSS
SaveExploits0References2
CVE
CVE
•added 2025/08/22 12:00 a.m.•34 views

CVE-2024-53494

The SpringBootBlog software (also referred to as Kyrie Blog ) version 1.0.0 is vulnerable to an improper access control issue within the preHandle function. This flaw allows an attacker to bypass authentication and gain unauthorized access to sensitive components . To remediate this, users should...

7.5CVSS6.5AI score0.00357EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/22 12:00 a.m.•14 views

PT-2025-34447 · Unknown · Springboot-Blog

Name of the Vulnerable Software and Affected Versions: SpringBootBlog version 1.0.0 Description: An incorrect access control issue exists in the preHandle function of SpringBootBlog version 1.0.0. This allows attackers to access sensitive components without proper authentication. Recommendations:...

7.5CVSS7.1AI score0.00357EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/08/22 12:00 a.m.•6 views

CVE-2024-53494

Incorrect access control in the preHandle function of SpringBootBlog v1.0.0 allows attackers to access sensitive components without authentication...

7AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/22 12:00 a.m.•11 views

Kyrie Blog 安全漏洞

Kyrie Blog is a personal blogging system by caozongpeng individual developer. A security vulnerability exists in Kyrie Blog version 1.0.0, which stems from improper access control of the preHandle function, which may result in unauthorized access to sensitive components...

7.5CVSS6.4AI score0.00357EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/20 7:15 p.m.•19 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 7:15 p.m.•24 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS0.0037EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/20 6:15 p.m.•15 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 6:15 p.m.•20 views

CVE-2024-53495

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS0.0037EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/20 5:15 p.m.•21 views

CVE-2024-50640

jeewx-boot 1.3 has an authentication bypass vulnerability in the preHandle function...

9.8CVSS0.00523EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/20 3:15 p.m.•18 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS5.7AI score0.00348EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/20 3:15 p.m.•61 views

CVE-2024-57491

Authentication Bypass vulnerability in jobx up to v1.0.1-RELEASE allows an attacker can exploit this vulnerability to access sensitive API without any token via the preHandle function...

8.8CVSS0.00348EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/20 12:00 a.m.•29 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

0.0037EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/08/20 12:00 a.m.•21 views

PT-2025-34138 · My-Site · My-Site

Name of the Vulnerable Software and Affected Versions: my-site version 1.0.2.RELEASE Description: Incorrect access control in the preHandle function allows attackers to access sensitive components without authentication. Recommendations: Apply updates to address the access control issue in the...

7.5CVSS6.3AI score0.0037EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/08/20 12:00 a.m.•10 views

CVE-2024-57152

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.2AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•22 views

jobx 安全漏洞

jobx is an open source make scheduling software from Datavane. A security vulnerability exists in jobx v1.0.1-RELEASE and earlier versions, which stems from an authentication bypass vulnerability in the preHandle function that could lead to unauthorized access to sensitive APIs...

8.8CVSS6.7AI score0.00348EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•5 views

CVE-2024-53495: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2.RELEASE allows attackers to access sensitive components without authentication...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
CVE
CVE
•added 2025/08/20 12:00 a.m.•51 views

CVE-2024-53495

The software my-site version v1.0.2.RELEASE , a personal website developed with springboot2.0 , contains an incorrect access control vulnerability. The root cause is located in the preHandle function, which allows unauthenticated attackers to access sensitive components without proper authorizati...

7.5CVSS7AI score0.0037EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/20 12:00 a.m.•7 views

CVE-2024-57152: Improper Access Control

Incorrect access control in the preHandle function of my-site v1.0.2 allows attackers to access sensitive components without authentication via the cn.luischen.interceptor.BaseInterceptor class...

7.5CVSS5.8AI score0.0037EPSS
SaveExploits1References1
Rows per page
Query Builder