Lucene search
K

8 matches found

The Hacker News
The Hacker News
added 2026/01/06 3:30 a.m.7 views

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

Users of the "@adonisjs/bodyparser" npm package are being advised to update to the latest version following the disclosure of a critical security vulnerability that, if successfully exploited, could allow a remote attacker to write arbitrary files on the server. Tracked as CVE-2026-21440 CVSS...

9.2CVSS6.5AI score0.00097EPSS
Exploits5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-4149

Malicious code in bioql PyPI...

5.3CVSS7.3AI score0.00164EPSS
Exploits1References9
OSV
OSV
added 2022/05/13 12:0 a.m.1 views

GHSA-HH26-6XWR-GGV7 Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

7.5CVSS6.8AI score0.00164EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2022/05/13 12:0 a.m.59 views

Denial of service in Spring Framework

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS3.4AI score0.00164EPSS
Exploits1References7Affected Software1
CNVD
CNVD
added 2022/05/13 12:0 a.m.37 views

Spring Framework Denial of Service Vulnerability

Spring Framework is the U.S. Spring team of a set of Java, JavaEE application framework . The framework helps developers build high-quality applications.Spring Framework 5.3.20 , 5.2.22 before the version of the denial of service vulnerability , the vulnerability stems from the data binding to th...

3.5CVSS2.9AI score0.00164EPSS
Exploits1
OSV
OSV
added 2022/05/12 8:15 p.m.33 views

CVE-2022-22970

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS5.2AI score0.00164EPSS
Exploits1References3
NVD
NVD
added 2022/05/12 8:15 p.m.25 views

CVE-2022-22970

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

5.3CVSS0.00164EPSS
Exploits1References3
Prion
Prion
added 2022/05/12 8:15 p.m.24 views

Design/Logic Flaw

In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a MultipartFile or javax.servlet.Part to a field in a model object...

3.5CVSS6.3AI score0.00164EPSS
Exploits1References3Affected Software2
Rows per page
Query Builder