Lucene search
+L

28 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/02 12:00 a.m.•2 views

CVE-2024-38827: Authorization Bypass Through User-Controlled Key

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/10/18 6:30 a.m.•188 views

Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

5.3CVSS6.6AI score0.00617EPSS
SaveExploits1References6Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/18 12:00 a.m.•1 views

CVE-2024-38820: Improper Handling of Case Sensitivity

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

5.3CVSS5.9AI score0.00617EPSS
SaveExploits1References1
Spring Security Advisories
Spring Security Advisories
•added 2024/10/17 12:00 a.m.•50 views

Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

3.1CVSS6.6AI score0.05666EPSS
SaveExploits2References1Affected Software1
OSV
OSV
•added 2018/04/17 8:29 p.m.•10 views

ALPINE-CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

7.5CVSS7.8AI score0.0393EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2018/04/17 8:00 p.m.•65 views

CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

7.5CVSS7.8AI score0.0393EPSS
SaveExploits0References7
OSV
OSV
•added 2018/04/14 12:00 a.m.•15 views

UBUNTU-CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

7.5CVSS7.8AI score0.0393EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2018/04/14 12:00 a.m.•53 views

perl -- multiple vulnerabilities

perldelta: CVE-2018-6797: heap-buffer-overflow WRITE of size 1 in Sregatom regcomp.c A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. perl 132227 CVE-2018-6798: Heap-buffer-overflow in Perlbytedumpstring utf8.c Matching a crafted locale...

9.8CVSS1.5AI score0.10668EPSS
SaveExploits0References2
Rows per page
Query Builder