3 matches found
CVE-2021-22097
In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100%...
EUVD-2022-3851
Malicious code in bioql PyPI...
MOAB-06-01-2007: Multiple Vendor PDF Document Catalog Handling Vulnerability
Summary The Adobe Portable Document Format PDF, specification v. 1.3 defines the root of a document's object hierarchy as the "catalog dictionary". The catalog contains the necessary references to objects and data that compose the document contents and their attributes. Also, it contains directiv...