127 matches found
cve-2018-1273
CVE-2018-1273 Spring Data Commons RCE Vulnerabilidad de ejecución remota de comandos uso C:\Users\CTF\Desktoppython cve-2018-1273.py / / | / / /| |/ : touch /tmp/jas502n 405, May Have a CVE-2018-1273 vulnerability! CVE-2018-1273 Vulnerability Exit! Cmd : Solicitud de BurpSuite: POST /account...
CVE-2018-1273
CVE-2018-1273 Environment for CVE-2018-1273 CVE-2018-1273: RCE with Spring Data Commons https://pivotal.io/security/cve-2018-1273 Application https://github.com/spring-projects/spring-data-examples/tree/master/web/example Build $ docker build -t cve-2018-1273 . Run $ docker run -d -p 8080:8080...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versiones anteriores a 1.13 hasta 1.13.10, 2.0 hasta 2.0.5, y versiones antiguas no soportadas, contienen una vulnerabilidad de enlace de propiedades causada por una neutralización incorrecta de elementos especiales. Un usuario malicioso remoto no autenticado o...
poc-cve-2018-1273
CVE-2018-1273 Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user or attacker can supply specially crafted...
CVE-2018-1273
CVE-2018-1273 Spring Data Commons, versiones anteriores a 1.13 a 1.13.10, 2.0 a 2.0.5, y versiones antiguas no soportadas, contienen una vulnerabilidad en el enlazador de propiedades causada por una neutralización incorrecta de elementos especiales. Un usuario malicioso remoto no autenticado o...
CLSA-2026-1790623749 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.2.3-tuxcare.1...
CLSA-2026-1789999868 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.1.8-tuxcare.1...
CLSA-2026-1789999145 TuxCare security update for org.springframework.data:spring-data-commons (3 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 3 CVEs. Fixed in 3.2.12-tuxcare.1...
CLSA-2026-1789995986 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.4.13-tuxcare.1...
ROOT-APP-MAVEN-CVE-2026-41716 CVE-2026-41716 in org.springframework.data:spring-data-commons - Patched by Root
Root has patched CVE-2026-41716 in the org.springframework.data:spring-data-commons package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41695 CVE-2026-41695 in org.springframework.data:spring-data-commons - Patched by Root
Root has patched CVE-2026-41695 in the org.springframework.data:spring-data-commons package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1789576613 TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 3.3.12-tuxcare.1...
CLSA-2026-1789225570 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.6...
CLSA-2026-1788420664 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.5...
CLSA-2026-1788348838 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 2.7.18-tuxcare.8...
CLSA-2026-1788194802 TuxCare security update for org.springframework.data:spring-data-commons (4 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 4 CVEs. Fixed in 3.3.13-tuxcare.4...
K000163049: Spring Data Commons vulnerability CVE-2026-41695
Security Advisory Description Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution. Affected versions: Spring Data Commons 4.0.0 through 4.0.5; 3.5.0...
CLSA-2026-1787403789 TuxCare security update for org.springframework.data:spring-data-commons (3 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 3 CVEs. Fixed in 3.3.13-tuxcare.3...
Security Bulletin: Multiple Vulnerabilities in watsonx.data
Summary Multiple vulnerabilities were addressed in watsonx.data 2.4.0 patch 3 version, which was present in different version from watson.data 2.4.0 Vulnerability Details CVEID:CVE-2026-41695 DESCRIPTION: Spring Data Commons applications may be vulnerable to denial of service through resource...
Denial Of Service
Spring Data Commons is vulnerable to Denial Of Service. The vulnerability is due to specially crafted HTTP requests causing excessive memory allocation when Spring Data Web Support is enabled with a controller method using @ProjectedPayload...