Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-18545

Malware in sbrugna...

7.5CVSS8.5AI score0.01603EPSS
Exploits0References11
GithubExploit
GithubExploit
added 2025/10/06 11:15 a.m.422 views

Exploit for Improper Handling of Case Sensitivity in Vmware Spring_Framework

CVE-2024-38820 Proof of Concept Overview This project dem...

5.3CVSS8.6AI score0.2051EPSS
Exploits2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-3496

Malicious code in bioql PyPI...

4.8CVSS6.4AI score0.00399EPSS
Exploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2025/04/07 8:9 a.m.20 views

Security Bulletin: The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly affects watsonx.data

Summary The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly. Hense could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-38827 DESCRIPTION: The usage of String.toLowerCase a...

4.8CVSS6.2AI score0.00399EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2024/12/04 11:12 p.m.24 views

CVE-2024-38829

A flaw was found in Spring LDAP. The usage of String.toLowerCase and String.toUpperCase has some locale dependent exceptions that could result in unintended columns being queried...

3.7CVSS6.6AI score0.00132EPSS
Exploits0References4
OSV
OSV
added 2024/12/04 9:30 p.m.0 views

GHSA-MQVR-2RP8-J7H4 Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

6.3CVSS6.8AI score0.00132EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2024/12/04 9:30 p.m.25 views

Spring LDAP data exposure vulnerability

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS3.8AI score0.00132EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2024/12/04 9:15 p.m.4 views

DEBIAN-CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00132EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/04 9:6 p.m.32 views

CVE-2024-38829 Spring LDAP sensitive data exposure for case-sensitive comparisons

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS0.00132EPSS
Exploits0References1
CVE
CVE
added 2024/12/04 9:6 p.m.319 views

CVE-2024-38829

CVE-2024-38829 is described as a vulnerability in Spring LDAP that enables data exposure due to case-sensitive comparisons. The issue affects Spring LDAP versions ranging from the earliest releases up to 2.4.3, and then 3.0.0–3.0.9, 3.1.0–3.1.7, and 3.2.0–3.2.7, including all versions prior to 2....

3.7CVSS3.8AI score0.00132EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2024/12/04 9:6 p.m.24 views

CVE-2024-38829

A vulnerability in Spring LDAP allows data exposure for case sensitive comparisons.This issue affects Spring LDAP: from 2.4.0 through 2.4.3, from 3.0.0 through 3.0.9, from 3.1.0 through 3.1.7, from 3.2.0 through 3.2.7, AND all versions prior to 2.4.0. The usage of String.toLowerCase and...

3.7CVSS4.9AI score0.00132EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2024/12/02 9:20 p.m.24 views

CVE-2024-38827

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.7AI score0.00399EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/12/02 3:31 p.m.108 views

Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.8AI score0.00399EPSS
Exploits0References7Affected Software1
OSV
OSV
added 2024/12/02 3:31 p.m.0 views

GHSA-Q3V6-HM2V-PW99 Spring Framework has Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

6.3CVSS5.9AI score0.00399EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2024/12/02 2:32 p.m.33 views

CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS6.9AI score0.00399EPSS
Exploits0References1
CVE
CVE
added 2024/12/02 2:32 p.m.332 views

CVE-2024-38827

CVE-2024-38827 (IBM Controller) is described as a locale-dependent issue in String.toLowerCase()/toUpperCase() that could cause authorization rules to bypass. Affected product/version: IBM Controller 11.1.0–11.1.1. Remediation: upgrade to IBM Controller 11.1.2 (per IBM bulletin). Connected docs p...

4.8CVSS5.2AI score0.00399EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/12/02 2:32 p.m.46 views

CVE-2024-38827 Spring Security Authorization Bypass for Case Sensitive Comparisons

The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

4.8CVSS0.00399EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/10/18 6:30 a.m.149 views

Spring Framework DataBinder Case Sensitive Match Exception

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase has some Locale dependent exceptions that could potentially result in fields not protected as expected...

5.3CVSS6.6AI score0.01514EPSS
Exploits1References6Affected Software2
OSV
OSV
added 2018/04/17 8:29 p.m.0 views

ALPINE-CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

7.5CVSS7AI score0.01603EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2018/04/17 8:0 p.m.33 views

CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

7.5CVSS8.3AI score0.01603EPSS
Exploits0References7
Rows per page
Query Builder