10528 matches found
UBUNTU-CVE-2025-41242
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
CVE-2025-41242
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
CVE-2025-41242
CVE-2025-41242 is a path traversal vulnerability in Spring Framework MVC when deployed on a non‑compliant Servlet container. An app is at risk if it is WAR‑deployed or uses an embedded container, the container does not reject suspicious URI sequences, and the app serves static resources via Sprin...
CVE-2025-41242 CVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: the application is deployed as a WAR or with an embedded Servlet container the Servlet...
Linux Distros Unpatched Vulnerability : CVE-2020-11998
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contai...
CVE-2025-8680 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version less than, or equal to, 2.0.0 via the fsapirequest function. This makes it possible for authenticated attackers, with subscriber-level access and above to make web requests to...
WordPress plugin B Slider 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress B Slider plugin suffers from a server-side request forgery vulnerability that stems from the fsapirequest function not implementing an adequate validation mechanis...
Linux Distros Unpatched Vulnerability : CVE-2025-38140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: limit swapping tables for devices with zone write plugs dmrevalidatezones only allowed new or previously unzoned devices to call blkrevalidatediskzones. If...
Malicious code in evony-resources-hack124 (npm)
The package evony-resources-hack124 was found to contain malicious code...
Malicious code in evony-resources-hack883 (npm)
The package evony-resources-hack883 was found to contain malicious code...
Malicious code in evony-resources-hack173 (npm)
The package evony-resources-hack173 was found to contain malicious code...
Malicious code in evony-resources-hack292 (npm)
The package evony-resources-hack292 was found to contain malicious code...
MAL-2025-23956 Malicious code in json-resources (npm)
The package json-resources was found to contain malicious code...
MAL-2025-20017 Malicious code in evony-resources-hack844 (npm)
The package evony-resources-hack844 was found to contain malicious code...
Malicious code in evony-resources-hack241 (npm)
The package evony-resources-hack241 was found to contain malicious code...
eksi-server (>=0.0.7, <=0.0.8) potentially affected by unknown CVE via json-resources (0.0.1)
json-resources NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on json-resources and may be impacted: - eksi-server =0.0.7, =0.0.8 Source cves: unknown CVE Source advisory: OSV:MAL-2025-23956...
MAL-2025-20005 Malicious code in evony-resources-hack030 (npm)
The package evony-resources-hack030 was found to contain malicious code...