122 matches found
PT-2026-73075
A vulnerability was identified in OpenBoxes up to 0.9.6. This impacts the function buildZebraTemplate of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Template Processing. The manipulation leads to improper neutralization of special elements use...
CLSA-2026-1786609421 TuxCare security update for org.grails (17 CVEs)
TuxCare rebuilt 33 org.grails packages to address 17 CVEs. Fixed in 6.2.1-tuxcare.1...
CVE-2022-35912
In grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 at least when certain Java 8 configurations are used, data binding allows a remote attacker to execute code by gaining access to the class loader...
EUVD-2014-3586
Malware in sbrugna...
EUVD-2018-0655
Malware in sbrugna...
EUVD-2014-0148
Malware in sbrugna...
EUVD-2014-2881
Malware in sbrugna...
EUVD-2014-2882
Malware in sbrugna...
EUVD-2017-15405
Malware in sbrugna...
EUVD-2016-7442
Malware in sbrugna...
EUVD-2012-1843
Malware in sbrugna...
EUVD-2022-6263
Malicious code in bioql PyPI...
EUVD-2022-3922
Malicious code in bioql PyPI...
EUVD-2022-45049
Malicious code in bioql PyPI...
EUVD-2022-4800
Malicious code in bioql PyPI...
EUVD-2023-3085
Malicious code in bioql PyPI...
CVE-2023-46131
Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3,...
CVE-2018-1000817
Asset Pipeline Grails Plugin Asset-pipeline plugin version Prior to 2.14.1.1, 2.15.1 and 3.0.6 contains a Incorrect Access Control vulnerability in Applications deployed in Jetty that can result in Download .class files and any arbitrary file. This attack appear to be exploitable via Specially...
CVE-2022-41923
Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint i.e. the targeted endpoint using the authorization requirements of a different endpoint i.e. the donor endpoint. In some Grails framework applications, access to t...