1812 matches found
org.springframework.data:spring-data-neo4j-aspects (2.0.0.release), org.springframework.data:spring-data-neo4j-cross-store (2.0.0.release) potentially affected by CVE-2013-7259 via org.neo4j:neo4j (1.6.m02)
org.neo4j:neo4j MAVEN version 1.6.m02 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.springframework.data:spring-data-neo4j-aspects 2.0.0.release - org.springframework.data:spring-data-neo4j-cross-store...
GHSA-XR4V-28RM-PVGW Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 Gosling SR6 and 1.10.x before 1.10.4 Hopper SR4, when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call...
au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +102 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.10.0.release, <=1.10.3.release)
org.springframework.data:spring-data-jpa MAVEN version =1.10.0.release, =1, =1, =1, =1, =1, =1.0.0-rc, =1.6, =0.85, =0.85, =0.85, =0.85, =0.89.6 and more Source cves: CVE-2016-6652 Source advisory: OSV:GHSA-XR4V-28RM-PVGW...
au.com.mountain-pass:hyperstate (>=1, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +554 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.9.5.release)
org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1, =1.4, =1.4, =0.62, =0.79, =0.70, =0.78, =0.84 and more Source cves: CVE-2016-6652 Source advisory: OSV:GHSA-XR4V-28RM-PVGW...
au.com.mountain-pass:hyperstate-client (>=1, <=10), au.com.mountain-pass:hyperstate-client-webdriver (>=1, <=10) +102 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.10.0.release, <=1.10.3.release)
org.springframework.data:spring-data-jpa MAVEN version =1.10.0.release, =1, =1, =1, =1, =1, =1.0.0-rc, =1.6, =0.85, =0.85, =0.85, =0.85, =0.89.6 and more Source cves: CVE-2016-6652 Source advisory: GHSA-XR4V-28RM-PVGW...
au.com.mountain-pass:hyperstate (>=1, <=9), biz.grundner.vaadin-in-spring:spring-vaadin (1.0) +554 more potentially affected by CVE-2016-6652 via org.springframework.data:spring-data-jpa (>=1.0.1.release, <=1.9.5.release)
org.springframework.data:spring-data-jpa MAVEN version =1.0.1.release, =1, =1.4, =1.4, =0.62, =0.79, =0.70, =0.78, =0.84 and more Source cves: CVE-2016-6652 Source advisory: GHSA-XR4V-28RM-PVGW...
Improper Neutralization of Special Elements used in an SQL Command Pivotal Spring Data JPA
SQL injection vulnerability in Pivotal Spring Data JPA before 1.9.6 Gosling SR6 and 1.10.x before 1.10.4 Hopper SR4, when used with a repository that defines a String query using the @Query annotation, allows attackers to execute arbitrary JPQL commands via a sort instance with a function call...
GHSA-9QF9-28H9-HQCJ Remote code execution in PATCH requests in Spring Data REST
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 can use specially crafted JSON data to run arbitrary Java code...
Remote code execution in PATCH requests in Spring Data REST
Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 Ingalls SR9, versions prior to 3.0.1 Kay SR1 can use specially crafted JSON data to run arbitrary Java code...
org.springframework.data:spring-data-rest-hal-browser (3.0.0.release), org.springframework.data:spring-data-rest-webmvc (3.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (3.0.0.release)
org.springframework.data:spring-data-rest-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...
org.springframework.data:spring-data-rest-hal-browser (3.0.0.release), org.springframework.data:spring-data-rest-webmvc (3.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (3.0.0.release)
org.springframework.data:spring-data-rest-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-hal-browser...
am.ik.home:uaa-server (>=1.0.0, <=1.9.0), br.com.intelipost:sdk-java (>=0.0.1, <=0.0.8) +69 more potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (>=2.0.0.release, <=2.6.8.release)
org.springframework.data:spring-data-rest-core MAVEN version =2.0.0.release, =1.0.0, =0.0.1, =2.3.0-release, =0.0.6, =0.0.1, =0.0.1, =1.0.0, =79, =92 - com.heapbrain:heapaudit 1.0.0 and more Source cves: CVE-2017-8046 Source advisory: OSV:GHSA-9QF9-28H9-HQCJ...
org.springframework.data:spring-data-rest-repository (1.0.0.release), org.springframework.data:spring-data-rest-webmvc (1.0.0.release) potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (1.0.0.release)
org.springframework.data:spring-data-rest-core MAVEN version 1.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - org.springframework.data:spring-data-rest-repository...
am.ik.home:uaa-server (>=1.0.0, <=1.9.0), br.com.intelipost:sdk-java (>=0.0.1, <=0.0.8) +69 more potentially affected by CVE-2017-8046 via org.springframework.data:spring-data-rest-core (>=2.0.0.release, <=2.6.8.release)
org.springframework.data:spring-data-rest-core MAVEN version =2.0.0.release, =1.0.0, =0.0.1, =2.3.0-release, =0.0.6, =0.0.1, =0.0.1, =1.0.0, =79, =92 - com.heapbrain:heapaudit 1.0.0 and more Source cves: CVE-2017-8046 Source advisory: GHSA-9QF9-28H9-HQCJ...
Spring Data Commons < 1.13.11 / 2.x < 2.0.6 RCE
The version of Spring Data Commons installed on the remote host is affected by a remote code execution vulnerability. Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of...
This Week in Spring - May 3rd, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! How are you doin? Im excited! This week Im speaking at the ArabJUG, and Ill be speaking at Microsofts huuuge JDConf event. Both of these are virtual. Then, next Monday, Im on a plane bound for London, UK, where Ill be speakin...
Ever wanted to rewrite a query in Spring Data JPA?
Sometimes, no matter how many features you try to apply, it seems impossible to get Spring Data JPA to apply every thing youd like to a query before it is sent to the EntityManager. With 3.0.0-SNAPSHOT and targeted for the next milestone release train of Spring Data, you now have the ability to g...
This Week in Spring - April 19th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Its been quite the week since we last talked! I flew to Atlanta, GA, for my first in-person show since the pandemic - Devnexus 2022. I loved the experience! Hopefully, the only souvenirs Ill have are the amazing memories and...
VMware Tanzu Spring Data Commons Property Binder Vulnerability
Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution...
info.archinnov:achilles-embedded (3.0.2), info.archinnov:achilles-junit (3.0.2) +2 more potentially affected by CVE-2021-44521 via org.apache.cassandra:cassandra-all (2.0.6)
org.apache.cassandra:cassandra-all MAVEN version 2.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - info.archinnov:achilles-embedded 3.0.2 - info.archinnov:achilles-junit 3.0.2 -...