Lucene search
+L

768 matches found

attackerkb
attackerkb
•added 2022/04/14 9:15 p.m.•16 views

CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

5.3CVSS6.8AI score0.05666EPSS
SaveExploits2References4
OSV
OSV
•added 2022/04/14 9:15 p.m.•12 views

DEBIAN-CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

5.3CVSS6.6AI score0.05666EPSS
SaveExploits2References1
OSV
OSV
•added 2022/04/14 9:15 p.m.•21 views

UBUNTU-CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

5.3CVSS6.7AI score0.05666EPSS
SaveExploits2References3
CVE
CVE
•added 2022/04/14 8:05 p.m.•371 views

CVE-2022-22968

CVE-2022-22968 affects Spring Framework where DataBinder’s disallowedFields patterns are case sensitive in versions 5.3.0–5.3.18, 5.2.0–5.2.20, and older unsupported releases. The issue means a field is not fully protected unless every first character (and nested path) is listed in both uppercase...

5.3CVSS6.7AI score0.05666EPSS
SaveExploits2References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/14 12:00 a.m.•11 views

PT-2022-15748 · Unknown +1 · Spring Framework +1

Name of the Vulnerable Software and Affected Versions: Spring Framework versions 5.3.0 through 5.3.18 Spring Framework versions 5.2.0 through 5.2.20 Spring Framework older unsupported versions Description: The patterns for disallowedFields on a DataBinder in Spring Framework are case sensitive...

5.3CVSS8.4AI score0.05666EPSS
SaveExploits2References22
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/14 12:00 a.m.•3 views

CVE-2022-22968: Improper Handling of Case Sensitivity

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

5.3CVSS6.7AI score0.05666EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2022/04/13 12:00 a.m.•10 views

Vmware Spring Framework 安全特征问题漏洞

Vmware Spring Framework is the United States, Vmware Vmware company's set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. Vmware Spring Framework has a security feature issue vulnerability that stems from the pattern of...

5.3CVSS6.8AI score0.05666EPSS
SaveExploits2References17
OSV
OSV
•added 2022/04/05 2:15 a.m.•12 views

CVE-2021-45893

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

7.5CVSS5.8AI score0.01595EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/04/05 2:15 a.m.•10 views

CVE-2021-45893

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

7.5CVSS5.5AI score0.01595EPSS
SaveExploits1References3
NVD
NVD
•added 2022/04/05 2:15 a.m.•25 views

CVE-2021-45893

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

7.5CVSS0.01595EPSS
SaveExploits1References2
Prion
Prion
•added 2022/04/05 2:15 a.m.•26 views

Input validation

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

4.3CVSS7.7AI score0.01595EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/04/05 1:12 a.m.•32 views

CVE-2021-45893

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

7.8AI score0.01595EPSS
SaveExploits1References2
CVE
CVE
•added 2022/04/05 1:12 a.m.•97 views

CVE-2021-45893

The CVE-2021-45893 entry applies to Softwarebuero Zauner ARC version 4.2.0.4. Connected documents confirm an input validation error caused by improper case sensitivity handling, which can make password guessing easier. Descriptions across sources (NVD, Red Hat, CNVD, PRION, CVE list) consistently...

7.5CVSS7.6AI score0.01595EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/05 12:00 a.m.•2 views

PT-2022-12455

Name of the Vulnerable Software and Affected Versions Softwarebuero Zauner ARC version 4.2.0.4 Description An issue was discovered that involves improper handling of case sensitivity. This issue makes password guessing easier. Recommendations For Softwarebuero Zauner ARC version 4.2.0.4, consider...

7.5CVSS5.8AI score0.01595EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/05 12:00 a.m.•4 views

CVE-2021-45893: Improper Handling of Case Sensitivity

An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password guessing easier...

7.5CVSS7.3AI score0.01595EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/15 7:15 p.m.•17 views

CVE-2021-0973

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

5CVSS6.1AI score0.00137EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/15 7:15 p.m.•9 views

CVE-2021-0973

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

5CVSS6AI score0.00137EPSS
SaveExploits0References2
CVE
CVE
•added 2021/12/15 6:06 p.m.•95 views

CVE-2021-0973

CVE-2021-0973 affects Android 12 and involves a flaw in isFileUri in UriUtil.java that allows bypassing the ignoring of file:// URIs due to improper case-sensitive handling. The issue can lead to local information disclosure with no additional privileges required, and exploitation requires user i...

5CVSS4.8AI score0.00137EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•3 views

CVE-2021-0973: Improper Handling of Case Sensitivity

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

5CVSS5.8AI score0.00137EPSS
SaveExploits0References2
OSV
OSV
•added 2021/12/01 12:00 a.m.•16 views

PUB-A-197328178

In isFileUri of UriUtil.java, there is a possible way to bypass ignoring file://URI attachment due to improper handling of case sensitivity. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

5CVSS5.9AI score0.00137EPSS
SaveExploits0References2
Rows per page
Query Builder