Lucene search
+L

362 matches found

Prion
Prion
•added 2017/11/27 10:29 a.m.•33 views

Remote code execution

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

7.5CVSS9.6AI score0.03554EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2017/11/27 10:29 a.m.•42 views

CVE-2017-8045

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

9.8CVSS9.6AI score0.03554EPSS
SaveExploits2References2
Mend
Mend
•added 2017/11/27 10:00 a.m.•10 views

CVE-2017-8045

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

9.8CVSS0.03554EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2017/11/27 10:00 a.m.•50 views

CVE-2017-8045

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

9.7AI score0.03554EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/27 12:00 a.m.•9 views

CVE-2017-8045: Deserialization of Untrusted Data

In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

9.8CVSS8.5AI score0.03554EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2017/11/27 12:00 a.m.•6 views

PT-2017-18088

Name of the Vulnerable Software and Affected Versions Pivotal Spring AMQP versions prior to 1.7.4 Pivotal Spring AMQP versions prior to 1.6.11 Pivotal Spring AMQP versions prior to 1.5.7 Description The issue allows an org.springframework.amqp.core.Message to be unsafely deserialized when being...

9.8CVSS0.03554EPSS
SaveExploits2References6
CNVD
CNVD
•added 2017/09/22 12:00 a.m.•24 views

Pivotal Spring AMQP Remote Code Execution Vulnerability

Spring AMQP is based on the Spring Framework AMQP messaging solution , providing templated send and receive messages to the abstraction layer , providing message-driven POJO-based message listening and so on. A remote code execution vulnerability exists in Pivotal Spring AMQP...

9.8CVSS9.6AI score0.03554EPSS
SaveExploits2References1
Veracode
Veracode
•added 2017/09/21 2:37 a.m.•28 views

Remote Code Execution (RCE)

spring-amqp is vulnerable to remote code execution RCE attacks. A malicious user can pass a org.springframework.amqp.core.Message object containing arbitrary code that is executed when deserialized by the application...

9.8CVSS7.9AI score0.03554EPSS
SaveExploits2References4Affected Software1
Spring Security Advisories
Spring Security Advisories
•added 2017/09/19 12:00 a.m.•28 views

Remote code execution in spring-amqp

In affected versions of Spring AMQP, a org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack...

9.8CVSS9AI score0.03554EPSS
SaveExploits2References2
Prion
Prion
•added 2017/04/21 8:59 p.m.•21 views

Code injection

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

7.5CVSS7.8AI score0.06283EPSS
SaveExploits1References5Affected Software2
NVD
NVD
•added 2017/04/21 8:59 p.m.•19 views

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

9.8CVSS9.8AI score0.06283EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2017/04/21 8:59 p.m.•25 views

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

9.8CVSS7.5AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2017/04/21 8:00 p.m.•52 views

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

9.7AI score0.06283EPSS
SaveExploits1References5
Mend
Mend
•added 2017/04/21 8:00 p.m.•8 views

CVE-2016-2173

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

9.8CVSS0.06283EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/21 12:00 a.m.•9 views

CVE-2016-2173: Improper Input Validation

org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code...

9.8CVSS6.6AI score0.06283EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/04/21 12:00 a.m.•4 views

PT-2017-2111

Name of the Vulnerable Software and Affected Versions Spring AMQP versions prior to 1.5.5 Description The issue is related to insufficient input validation in the org.springframework.core.serializer.DefaultDeserializer component of the Spring AMQP application for RabbitMQ message exchange. This...

9.8CVSS0.06283EPSS
SaveExploits1References11
GithubExploit
GithubExploit
•added 2017/03/29 1:25 a.m.•14 views

Exploit for Improper Input Validation in Fedoraproject Fedora

CVE-2016-2173 - Remote Code Execution in Spring AMQP - App Tes...

9.8CVSS0.06283EPSS
SaveExploits1
CNVD
CNVD
•added 2016/07/12 12:00 a.m.•28 views

Pivotal Software Spring AMQP Remote Code Execution Vulnerability

Pivotal Software Spring AMQP is the U.S. Pivotal Software Spring Framework based on a set of AMQP messaging solution . The solution provides templated send and receive messages and message-driven abstraction layer based on message-driven POJO classes and so on. A remote code execution vulnerabili...

9.8CVSS8.4AI score0.06283EPSS
SaveExploits1References1
Fedora
Fedora
•added 2016/04/22 1:53 a.m.•65 views

[SECURITY] Fedora 22 Update: springframework-amqp-1.3.9-4.fc22

The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...

9.8CVSS2AI score0.06283EPSS
SaveExploits1
Fedora
Fedora
•added 2016/04/20 7:24 p.m.•53 views

[SECURITY] Fedora 23 Update: springframework-amqp-1.3.9-4.fc23

The Spring AMQP project applies core Spring concepts to the development of AMQP-based messaging solutions. It provides a "template" as a high-level abstraction for sending and receiving messages. It also provides support for Message driven POJOs with a "listener container". These libraries...

9.8CVSS2AI score0.06283EPSS
SaveExploits1
Rows per page
Query Builder