66 matches found
database-spring-ENC
spring-ENC | sprint encode plan text get enc password Reference links: How to encrypt user passwords http://www.jasypt.org/howtoencryptuserpasswords.html 0x00 Introduction Jasypt stands for Java Simplified Encryption. It provides basic encryption of plain text, numbers, and binary files to protec...
org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (2.0-m2)
org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...
org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41845 via org.springframework:spring-webmvc (2.0-m2)
org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...
org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41843 via org.springframework:spring-webmvc (2.0-m2)
org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...
org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41841 via org.springframework:spring-webmvc (2.0-m2)
org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...
org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +9 more potentially affected by CVE-2026-41844 via org.springframework:spring-webmvc (2.0-m2)
org.springframework:spring-webmvc MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 -...
Use Of Predictable Salt
jasypt-spring-boot is vulnerable to Use of Predictable Salt. The vulnerability is due to the getSecretKeySaltGenerator implementation in SimpleGCMConfig.java, which can generate predictable salts for password hashing operations. This reduces the effectiveness of the one-way hash and may allow...
CVE-2026-9370
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
GHSA-JGJ7-C8VJ-W563 jasypt-spring-boot Uses a One-Way Hash without a Salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
jasypt-spring-boot Uses a One-Way Hash without a Salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +865 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot-starter (>=3.0.0, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot-starter MAVEN version =3.0.0, =1.0.0, =1.0.0, =1.0, =1.0.4.r, =4.0.6.117.0, =4.0.6.117.1, =1.1.1, =1.0.1, =1.0.7 - club.gclmit:chaos-spring-boot-starter 1.5.0.release - cn.com.tltim.pigx:mybatis-enhance 5.0.0-20240820 - cn.com.tltim.pigx:pigx...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +916 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=3.0.0, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =3.0.0, =1.0.0, =1.0.0, =1.0, =1.0.4.r, =4.0.6.117.0, =4.0.6.117.1, =1.1.1, =1.0.1, =1.0.7 - club.gclmit:chaos-spring-boot-starter 1.5.0.release - cn.com.tltim.pigx:mybatis-enhance 5.0.0-20240820 - cn.com.tltim.pigx:pigx 5.0.0-20240820 -...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +865 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot-starter (>=3.0.0, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot-starter MAVEN version =3.0.0, =1.0.0, =1.0.0, =1.0, =1.0.4.r, =4.0.6.117.0, =4.0.6.117.1, =1.1.1, =1.0.1, =1.0.7 - club.gclmit:chaos-spring-boot-starter 1.5.0.release - cn.com.tltim.pigx:mybatis-enhance 5.0.0-20240820 - cn.com.tltim.pigx:pigx...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +916 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=3.0.0, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =3.0.0, =1.0.0, =1.0.0, =1.0, =1.0.4.r, =4.0.6.117.0, =4.0.6.117.1, =1.1.1, =1.0.1, =1.0.7 - club.gclmit:chaos-spring-boot-starter 1.5.0.release - cn.com.tltim.pigx:mybatis-enhance 5.0.0-20240820 - cn.com.tltim.pigx:pigx 5.0.0-20240820 -...
biz.devstack.springframework.boot:spring-boot-starter-api (>=1.0.0, <=1.2.1), biz.devstack:spring-boot-starter-api-quickstart (>=1.0.0, <=1.0.4) +718 more potentially affected by CVE-2026-9370 via com.github.ulisesbocchio:jasypt-spring-boot (>=3.0.4, <=4.0.4)
com.github.ulisesbocchio:jasypt-spring-boot MAVEN version =3.0.4, =1.0.0, =1.0.0, =1.0, =4.0.6.117.0, =4.0.6.117.1, =4.0.6.2606.1 - cn.com.tltim.pigx:mybatis-enhance 5.0.0-20240820 - cn.com.tltim.pigx:pigx 5.0.0-20240820 - cn.com.tltim.pigx:pigx-common 5.0.0-20240820 -...
Use of a One-Way Hash with a Predictable Salt
Overview Affected versions of this package are vulnerable to Use of a One-Way Hash with a Predictable Salt in the getSecretKeySaltGenerator function of the Password Hash Handler component. An attacker can compromise the confidentiality of hashed secrets by exploiting the use of a predictable salt...
CVE-2026-9370
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...
CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
A weakness has been identified in ulisesbocchio jasypt-spring-boot up to 3.0.5/4.0.4. Affected by this vulnerability is the function getSecretKeySaltGenerator of the file jasypt-spring-boot/src/main/java/com/ulisesbocchio/jasyptspringboot/encryptor/SimpleGCMConfig.java of the component Password...