Lucene search
+L

87 matches found

vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•3 views

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•3 views

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +20 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0-m2)

org.springframework:spring-core MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0 - org.acegisecurity:acegi-security-adapters...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•5 views

org.acegisecurity:acegi-security (1.0.4), org.acegisecurity:acegi-security-adapters (1.0.4) +34 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0.4)

org.springframework:spring-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.acegisecurity:acegi-security 1.0.4 - org.acegisecurity:acegi-security-adapters 1.0.4 -...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•3 views

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +26 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0.3)

org.springframework:spring-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•3 views

com.gestalt.common.injection:common-injection-spring-impl (0.8), com.google.code.struts2webflow:struts2webflow-parent (1.0.4) +39 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0.1)

org.springframework:spring-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.gestalt.common.injection:common-injection-spring-impl 0.8 -...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:07 p.m.•5 views

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2018-1271 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

5.9CVSS0.30338EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•2 views

org.springframework:spring-aop (1.2.2), org.springframework:spring-beans (1.2.2) +10 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (1.2.2)

org.springframework:spring-core MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.2 - org.springframework:spring-beans 1.2.2 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•3 views

org.springframework:spring-aop (1.2.3), org.springframework:spring-beans (1.2.3) +10 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (1.2.3)

org.springframework:spring-core MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.3 - org.springframework:spring-beans 1.2.3 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•2 views

org.springframework:spring-aop (1.2.4), org.springframework:spring-beans (1.2.4) +10 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (1.2.4)

org.springframework:spring-core MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 1.2.4 - org.springframework:spring-beans 1.2.4 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•2 views

org.springframework:spring-aop (2.0-m1), org.springframework:spring-beans (2.0-m1) +13 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (2.0-m1)

org.springframework:spring-core MAVEN version 2.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m1 - org.springframework:spring-beans 2.0-m1 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•1 views

org.springframework:spring-aop (2.0-m4), org.springframework:spring-beans (2.0-m4) +7 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (2.0-m4)

org.springframework:spring-core MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.springframework:spring-aop 2.0-m4 - org.springframework:spring-beans 2.0-m4 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•4 views

com.gestalt.common.injection:common-injection-spring-impl (0.8), com.google.code.struts2webflow:struts2webflow-parent (1.0.4) +39 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (2.0.1)

org.springframework:spring-core MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - com.gestalt.common.injection:common-injection-spring-impl 0.8 -...

6.5CVSS0.03017EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2018/10/17 8:02 p.m.•4 views

org.jasig.service:person-directory (1.0.1), org.jasig:person-directory (1.0.0) +26 more potentially affected by CVE-2018-1257 via org.springframework:spring-core (2.0.3)

org.springframework:spring-core MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - org.jasig.service:person-directory 1.0.1 - org.jasig:person-directory 1.0.0 -...

6.5CVSS0.03017EPSS
SaveExploits0
osv_ghsa
osv_ghsa
•added 2018/10/16 7:37 p.m.•17 views

GHSA-8MR5-H28G-36QX Spring AOP functionality (Struts) vulnerable to DoS attack

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References10
Github Security Blog
Github Security Blog
•added 2018/10/16 7:37 p.m.•52 views

Spring AOP functionality (Struts) vulnerable to DoS attack

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References11Affected Software1
RedhatCVE
RedhatCVE
•added 2017/08/11 1:48 p.m.•54 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2017/07/18 12:00 a.m.•49 views

Apache Struts Spring AOP DoS Vulnerability (S2-049) - Linux

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack when user was properly authenticated. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced...

7.5CVSS7.1AI score0.10554EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/07/14 12:00 a.m.•114 views

Apache Struts 2.5.x < 2.5.12 Multiple DoS (S2-047) (S2-049)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.12. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when handling a specially crafted URL in a form field when the built-in URL validator is used. An unauthenticated,...

9.8CVSS7.7AI score0.32739EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2017/07/13 3:29 p.m.•56 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS8.2AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2017/07/13 3:29 p.m.•43 views

CVE-2017-9787

When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33...

7.5CVSS7.4AI score0.10554EPSS
SaveExploits0References3
Rows per page
Query Builder