Oracle WebCenter Sites (January 2026 CPU)

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Core Apache Log4j. The...

Security Bulletin: vulerability in IBM Spectrum Symphony with spring security

Summary vulerability in IBM Spectrum Symphony with spring security Vulnerability Details CVEID:CVE-2024-38827 DESCRIPTION: The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...

EUVD-2021-1497

Malware in sbrugna...

EUVD-2019-0562

Malware in sbrugna...

EUVD-2020-0457

Malware in sbrugna...

EUVD-2021-1083

Malware in sbrugna...

EUVD-2019-0437

Malware in sbrugna...

EUVD-2018-0691

Malware in sbrugna...

EUVD-2020-0449

Malware in sbrugna...

EUVD-2020-1289

Malware in sbrugna...

EUVD-2022-7386

Malicious code in bioql PyPI...

EUVD-2024-0745

Malicious code in bioql PyPI...

EUVD-2024-0908

Malicious code in bioql PyPI...

EUVD-2022-5665

Malicious code in bioql PyPI...

EUVD-2023-1423

Malicious code in bioql PyPI...

Authorization Bypass

org.springframework.security, spring-security-core is vulnerable to Authorization Bypass. The vulnerability is due to improper method security annotation detection due to issues in locating annotations on parameterized types or methods, allowing an attacker to access methods or resources without...

This Week in Spring - January 23rd, 2024

Hi, Spring fans, and greetings from CERN, home of the famous Large Hadron Collider, where I'm speaking again at the VOXXED Days CERN 2017 event. It's been an amazing almost week here in lovely Switzerland, first in Lugano for VOXXED Days Ticino, and now in Geneva. I'm super excited to be here, bu...

PT-2022-20892 · Unknown · Spring Security

Name of the Vulnerable Software and Affected Versions: Spring Security versions 5.6 prior to 5.6.9 Spring Security versions 5.7 prior to 5.7.5 Description: The issue concerns the potential bypass of authorization rules in Spring Security via forward or include dispatcher types. An application is...