663 matches found
CVE-2024-38828 CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter
Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...
CVE-2024-38828: Uncontrolled Resource Consumption
Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...
VMware Spring Framework < 5.3.42 DoS Vulnerability - Linux
The VMware Spring Framework is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
PT-2024-28235
Name of the Vulnerable Software and Affected Versions Spring MVC affected versions not specified Description The issue concerns Spring MVC controller methods that utilize an @RequestBody byte method parameter, making them susceptible to Denial of Service DoS attacks. Recommendations At the moment...
DoS via Spring MVC controller method with byte[] parameter
Spring MVC controller methods with an @RequestBody byte method parameter are vulnerable to a DoS attack...
Path Traversal org.springframework:spring-webmvc Dependency in Confluence Data Center and Server
This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 3.0 of Confluence Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
Exploit for Code Injection in Vmware Spring_Framework
Expoitation-de-la-vuln-rabilit-CVE-2022-22965 La vulnérabilité...
The vulnerability of the functional web framework WebFlux.fn within the Spring Framework allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functional web frameworks WebMvc.fn and WebFlux.fn in the Spring Framework is due to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Path Traversal
org.springframework:spring-webmvc and org.springframework:spring-webflux are vulnerable to Path Traversal. The vulnerability is due to inadequate validation of file paths in HTTP requests, allowing access to files on the file system when using RouterFunctions with a FileSystemResource location...
CVE-2024-40502
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...
CVE-2024-40502
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...
CVE-2024-40502
A remote SQL injection vulnerability exists in the Hospital Management System Project in ASP.Net MVC version 1 . The root cause is the improper sanitization of user-supplied input in the txt_login_username.Text and txt_login_pass.Text fields, which are concatenated directly into an SQL query stri...
CVE-2024-40502
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...
CVE-2024-40502: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btnloginbClick function of the Loginpage.aspx...
Hospital Management System Project In ASP.Net MVC 1 SQL Injection Vulnerability
Hospital Management System Project in ASP.Net MVC version 1 suffers from a remote SQL injection vulnerability that allows for authentication bypass. Exploit Title: Hospital Management System Project in ASP.Net MVC - SQL Injection / Authentication Bypass Date: 07/16/2024 Exploit Author: 0xMykull...
Malicious code in Be.Vlaanderen.Basisregistеrs.AspNetCore.Mvс.Middleware.DefaultResponseCompressіоnQuality (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4097 Malicious code in Be.Vlaanderen.Bаsisregisters.AspNetCorе.Mvc.Formatters.Json (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4185 Malicious code in Be.Vlaanԁeren.Basisregisters.AspNetCore.Mvc.Middleware.AddCorrelatioոIdToResponse (NuGet)
--- -= Per source details. Do not edit below this line.=-...