Lucene search
K

34 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2827

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00083EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-11989

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass. CVE-2020-119...

9.8CVSS8.1AI score0.84744EPSS
Exploits1References2
OSV
OSV
added 2023/10/25 6:32 p.m.27 views

GHSA-W9VH-HV5G-7WMR SaToken authentication bypass vulnerability

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS8.7AI score0.00083EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2023/10/25 6:32 p.m.51 views

SaToken authentication bypass vulnerability

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS7AI score0.00083EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/10/25 6:17 p.m.10 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS7.4AI score
Exploits0References1
NVD
NVD
added 2023/10/25 6:17 p.m.9 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS8.8AI score0.00083EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/10/25 6:17 p.m.2 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS5.9AI score0.00083EPSS
Exploits1References2
Prion
Prion
added 2023/10/25 6:17 p.m.15 views

Authentication flaw

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

6.5CVSS8.7AI score0.00083EPSS
Exploits1References1Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2023/10/25 12:0 a.m.22 views

SaToken authentication bypass vulnerability

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

8.8CVSS7.4AI score0.00083EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2023/10/25 12:0 a.m.10 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

7AI score0.00083EPSS
Exploits1References1
Cvelist
Cvelist
added 2023/10/25 12:0 a.m.13 views

CVE-2023-43961

An issue in Dromara SaToken version 1.3.50RC and before when using Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9AI score0.00083EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2023/10/13 12:0 a.m.1 views

PT-2023-29052 · Dromara · Dromara Satoken

Name of the Vulnerable Software and Affected Versions: Dromara SaToken versions 1.3.50RC and earlier Description: An issue in Dromara SaToken when using Spring dynamic controllers may cause an authentication bypass due to a specially crafted request. Recommendations: For Dromara SaToken versions...

8.8CVSS7.5AI score0.00083EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2021/05/07 3:53 p.m.42 views

Improper Authentication in Apache Shiro

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS9AI score0.88599EPSS
Exploits1References9Affected Software1
OSV
OSV
added 2021/05/07 3:53 p.m.0 views

GHSA-26GR-CVQ3-QXGF Improper Authentication in Apache Shiro

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS5.8AI score0.88599EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2021/05/07 3:53 p.m.44 views

Improper Authentication in Apache Shiro

Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS5.3AI score0.84744EPSS
Exploits1References10Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2021/04/12 12:0 a.m.1 views

VulnCheck KEV: CVE-2020-1957

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS7.3AI score0.88599EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2020/12/16 12:11 p.m.2 views

shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass

A flaw was found in Apache Shiro in versions prior to 1.5.3. When using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS5.7AI score0.84744EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2020/06/23 2:34 p.m.35 views

CVE-2020-11989

A flaw was found in Apache Shiro in versions prior to 1.5.3. When using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

7.5CVSS3.5AI score0.84744EPSS
Exploits1References3
OSV
OSV
added 2020/06/22 7:15 p.m.1 views

DEBIAN-CVE-2020-11989

Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS7.1AI score0.84744EPSS
Exploits1References1
OSV
OSV
added 2020/06/22 7:15 p.m.18 views

CVE-2020-11989

Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...

9.8CVSS6.9AI score
Exploits0References7
Rows per page
Query Builder