Lucene search
+L

7 matches found

NVD
NVD
added 2026/08/27 8:17 p.m.10 views

CVE-2026-59299

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

3.5CVSS0.00151EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/27 5:57 p.m.36 views

CVE-2026-59299

CVE-2026-59299 affects Spring Cloud Function (versions 5.0.0–5.0.3 , 4.3.0–4.3.4 , 4.2.0–4.2.7 , and 3.2.16 and earlier ). The vulnerability involves a composition lookup that can potentially poison the base function , leading to low impact on both confidentiality and integrity. The CVSS 3.1 base...

3.5CVSS5.1AI score0.00151EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/08/27 5:57 p.m.37 views

CVE-2026-59299 Composition lookup can potentially poison base function in Spring Cloud Function

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

3.1CVSS0.00151EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 5:57 p.m.12 views

EUVD-2026-67185

Composition lookup can potentially poison base function in Spring Cloud Function. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7 Spring Cloud Function 3.2.16 and earlier...

3.1CVSS5.2AI score0.00151EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/08/27 12:00 a.m.16 views

PT-2026-82707

Name of the Vulnerable Software and Affected Versions Spring Cloud Function versions 5.0.0 through 5.0.3 Spring Cloud Function versions 4.3.0 through 4.3.4 Spring Cloud Function versions 4.2.0 through 4.2.7 Spring Cloud Function versions 3.2.16 and earlier Description Composition lookup can...

3.5CVSS5.7AI score0.00151EPSS
SaveExploits0References3
Snyk
Snyk
added 2026/08/20 12:00 a.m.21 views

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' through the composition lookup. An attacker can manipulate the base function by injecting malicious components during the lookup process,...

3.5CVSS5.9AI score0.00151EPSS
SaveExploits0References2
OSV
OSV
added 2020/05/18 3:00 p.m.12 views

UBUNTU-CVE-2020-10722

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...

6.7CVSS6.9AI score0.00378EPSS
SaveExploits0References3
Rows per page
Query Builder