Lucene search
+L

6810 matches found

Github Security Blog
Github Security Blog
added 2025/08/18 9:31 a.m.19 views

Spring Framework MVC Applications Path Traversal Vulnerability

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS7.1AI score0.02054EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2025/08/18 9:15 a.m.5 views

DEBIAN-CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS6.5AI score0.02054EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/18 9:15 a.m.13 views

CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS0.02054EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/18 9:15 a.m.9 views

CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

7.1AI score
SaveExploits0References1
OSV
OSV
added 2025/08/18 9:15 a.m.8 views

UBUNTU-CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS6.3AI score0.02054EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/08/18 8:47 a.m.10 views

CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS7.2AI score0.02054EPSS
SaveExploits1References1
CVE
CVE
added 2025/08/18 8:47 a.m.246 views

CVE-2025-41242

CVE-2025-41242 is a path traversal vulnerability in Spring Framework MVC when deployed on a non‑compliant Servlet container. An app is at risk if it is WAR‑deployed or uses an embedded container, the container does not reject suspicious URI sequences, and the app serves static resources via Sprin...

5.9CVSS6.5AI score0.02054EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2025/08/18 8:47 a.m.21 views

CVE-2025-41242

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS6.5AI score0.02054EPSS
SaveExploits1
Cvelist
Cvelist
added 2025/08/18 8:47 a.m.19 views

CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers

Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...

5.9CVSS0.02054EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2016-1000346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be us...

4.3CVSS6.2AI score0.0243EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-38407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv: cpuopssbi: Use static array for bootdata Since commit 6b9f29b81b15 riscv: Enable pcpu...

5.5CVSS5.5AI score0.00157EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 7:27 p.m.9 views

Malicious code in pngquant-bin-static (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

6.9AI score
SaveExploits0
OSV
OSV
added 2025/08/14 7:27 p.m.4 views

MAL-2025-6948 Malicious code in pngquant-bin-static (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.5 views

Malicious code in boolean-theta-static-sudo-node (npm)

The package boolean-theta-static-sudo-node was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.4 views

Malicious code in long-scale-static-report-float (npm)

The package long-scale-static-report-float was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.8 views

Malicious code in static-view-bad-easy-tree (npm)

The package static-view-bad-easy-tree was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.5 views

MAL-2025-39308 Malicious code in wind-pipe-double-parse-static (npm)

The package wind-pipe-double-parse-static was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-15964 Malicious code in boolean-theta-static-sudo-node (npm)

The package boolean-theta-static-sudo-node was found to contain malicious code...

7.2AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.6 views

MAL-2025-33957 Malicious code in static-view-bad-easy-tree (npm)

The package static-view-bad-easy-tree was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in orchestrate-finally-static-long-cloud (npm)

The package orchestrate-finally-static-long-cloud was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder