Lucene search
K

8 matches found

The Hacker News
The Hacker News
added 2026/01/06 3:30 a.m.7 views

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Users of the "@adonisjs/bodyparser" npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could allow a remote attacker to write arbitrary files on the server. Tracked as CVE-2026-21440 CVSS...

9.2CVSS6.5AI score0.01281EPSS
Exploits5
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-4149

Malicious code in bioql PyPI...

5.3CVSS7.3AI score0.01853EPSS
Exploits1References9
OSV
OSV
added 2022/05/13 12:0 a.m.3 views

GHSA-HH26-6XWR-GGV7 Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

7.5CVSS6.8AI score0.01853EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2022/05/13 12:0 a.m.65 views

Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS3.4AI score0.01853EPSS
Exploits1References7Affected Software1
CNVD
CNVD
added 2022/05/13 12:0 a.m.39 views

Spring Framework Denial of Service Vulnerability

Spring Framework is the U.S. Spring team of a set of Java, JavaEE application framework . The framework helps developers build high-quality applications.Spring Framework 5.3.20 , 5.2.22 before the version of the denial of service vulnerability , the vulnerability stems from the data binding to th...

3.5CVSS2.9AI score0.01853EPSS
Exploits1
NVD
NVD
added 2022/05/12 8:15 p.m.35 views

CVE-2022-22970

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS0.01853EPSS
Exploits1References3
OSV
OSV
added 2022/05/12 8:15 p.m.39 views

CVE-2022-22970

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS5.2AI score0.01853EPSS
Exploits1References3
Prion
Prion
added 2022/05/12 8:15 p.m.27 views

Design/Logic Flaw

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

3.5CVSS6.3AI score0.01853EPSS
Exploits1References3Affected Software2
Rows per page
Query Builder