Lucene search
+L

579 matches found

Github Security Blog
Github Security Blog
added 2024/11/18 6:30 a.m.223 views

Spring MVC controller vulnerable to a DoS attack

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/11/18 6:30 a.m.44 views

GHSA-W3C8-7R8F-9JP8 Spring MVC controller vulnerable to a DoS attack

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS5AI score0.00724EPSS
SaveExploits0References4
NVD
NVD
added 2024/11/18 4:15 a.m.42 views

CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS0.00724EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/18 4:15 a.m.31 views

CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

7AI score
SaveExploits0References2
OSV
OSV
added 2024/11/18 4:15 a.m.12 views

UBUNTU-CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.8AI score0.00724EPSS
SaveExploits0References3
CVE
CVE
added 2024/11/18 3:45 a.m.263 views

CVE-2024-38828

CVE-2024-38828: Spring MVC controller methods with an @RequestBody byte[] parameter are vulnerable to DoS (Uncontrolled Resource Consumption). Publicly documented in IBM OpenPages and related Bulletins; impact centers on Spring MVC data binding and request body handling. Remediation in affected I...

5.3CVSS5AI score0.00724EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2024/11/18 3:45 a.m.26 views

CVE-2024-38828

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.5AI score0.00724EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/11/18 3:45 a.m.63 views

CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS0.00724EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 3:45 a.m.25 views

CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS7.1AI score0.00724EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/11/18 12:00 a.m.24 views

VMware Spring Framework < 5.3.42 DoS Vulnerability - Linux

The VMware Spring Framework is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.3CVSS6.4AI score0.00724EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/11/17 12:00 a.m.13 views

PT-2024-28235

Name of the Vulnerable Software and Affected Versions Spring MVC affected versions not specified Description The issue concerns Spring MVC controller methods that utilize an @RequestBody byte method parameter, making them susceptible to Denial of Service DoS attacks. Recommendations At the moment...

5.3CVSS6.8AI score0.00724EPSS
SaveExploits0References16
Spring Security Advisories
Spring Security Advisories
added 2024/11/15 12:00 a.m.38 views

DoS via Spring MVC controller method with byte[] parameter

Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...

5.3CVSS6.7AI score0.00724EPSS
SaveExploits0References1Affected Software1
Atlassian
Atlassian
added 2024/11/06 6:11 a.m.43 views

Path Traversal org.springframework:spring-webmvc Dependency in Confluence Data Center and Server

This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

7.5CVSS7.1AI score0.14718EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2024/11/05 4:30 p.m.390 views

Exploit for Code Injection in Vmware Spring_Framework

Expoitation-de-la-vuln-rabilit-CVE-2022-22965 La vulnérabilité...

9.8CVSS9AI score0.99638EPSS
SaveExploits105
BDU FSTEC
BDU FSTEC
added 2024/11/01 12:00 a.m.19 views

The vulnerability of the functional web framework WebFlux.fn within the Spring Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functional web frameworks WebMvc.fn and WebFlux.fn in the Spring Framework is due to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.4CVSS6.6AI score0.01741EPSS
SaveExploits2References4Affected Software1
Veracode
Veracode
added 2024/09/16 10:21 a.m.13 views

Path Traversal

org.springframework:spring-webmvc and org.springframework:spring-webflux are vulnerable to Path Traversal. The vulnerability is due to inadequate validation of file paths in HTTP requests, allowing access to files on the file system when using RouterFunctions with a FileSystemResource location...

7.5CVSS7.4AI score0.14718EPSS
SaveExploits1References4Affected Software2
NVD
NVD
added 2024/07/22 9:15 p.m.36 views

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

9.8CVSS0.01291EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2024/07/22 12:00 a.m.46 views

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

0.01291EPSS
SaveExploits3References3
CVE
CVE
added 2024/07/22 12:00 a.m.81 views

CVE-2024-40502

CVE-2024-40502 affects Hospital Management System Project in ASP.Net MVC 1. The vulnerability is an SQL injection in the btn_login_b_Click function of Loginpage.aspx, caused by concatenating user inputs (txt_login_username.Text and txt_login_pass.Text) into an SQL query without proper parameteriz...

9.8CVSS8.5AI score0.01291EPSS
SaveExploits3References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/22 12:00 a.m.22 views

CVE-2024-40502

SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...

8.4AI score0.01291EPSS
SaveExploits3References3
Rows per page
Query Builder