20 matches found
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.2.28 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.40 Vulnerability Details CVEID:CVE-2026-41003 DESCRIPTION: An attacker able to influence values in RelyingPartyRegistration may be able to run arbitrary code on HTML forms generated by Spring Security filters...
Oracle WebCenter Sites (January 2026 CPU)
The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Sites installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware component: Core Apache Log4j. The...
Security Bulletin: vulerability in IBM Spectrum Symphony with spring security
Summary vulerability in IBM Spectrum Symphony with spring security Vulnerability Details CVEID:CVE-2024-38827 DESCRIPTION: The usage of String.toLowerCase and String.toUpperCase has some Locale dependent exceptions that could potentially result in authorization rules not working properly...
EUVD-2020-0457
Malware in sbrugna...
EUVD-2020-1289
Malware in sbrugna...
EUVD-2020-0449
Malware in sbrugna...
EUVD-2019-0562
Malware in sbrugna...
EUVD-2018-0691
Malware in sbrugna...
EUVD-2021-1083
Malware in sbrugna...
EUVD-2019-0437
Malware in sbrugna...
EUVD-2021-1497
Malware in sbrugna...
EUVD-2024-0908
Malicious code in bioql PyPI...
EUVD-2022-7386
Malicious code in bioql PyPI...
EUVD-2024-0745
Malicious code in bioql PyPI...
EUVD-2022-5665
Malicious code in bioql PyPI...
EUVD-2023-1423
Malicious code in bioql PyPI...
Authorization Bypass
org.springframework.security, spring-security-core is vulnerable to Authorization Bypass. The vulnerability is due to improper method security annotation detection due to issues in locating annotations on parameterized types or methods, allowing an attacker to access methods or resources without...
This Week in Spring - January 23rd, 2024
Hi, Spring fans, and greetings from CERN, home of the famous Large Hadron Collider, where I'm speaking again at the VOXXED Days CERN 2017 event. It's been an amazing almost week here in lovely Switzerland, first in Lugano for VOXXED Days Ticino, and now in Geneva. I'm super excited to be here, bu...
PT-2022-20892
Name of the Vulnerable Software and Affected Versions Spring Security versions 5.6 prior to 5.6.9 Spring Security versions 5.7 prior to 5.7.5 Description The issue concerns the potential bypass of authorization rules in Spring Security via forward or include dispatcher types. An application is...