Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•6 views

PT-2026-123452

When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters a CRL file with the wrong encoding, it may exit...

7.5CVSS5.9AI score0.00397EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/04/29 12:16 p.m.•22 views

DEBIAN-CVE-2026-22741

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: the application is using Spring MVC or Spring WebFlux the application is configuring the resource chain support...

3.1CVSS6.7AI score0.00236EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
•added 2026/04/17 12:00 a.m.•56 views

Static resource cache poisoning in Spring MVC and WebFlux

Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources. More precisely, an application can be vulnerable when all the following are true: When all the conditions above are met, the attacker can send malicious requests and poison the resource cache wi...

3.1CVSS6.8AI score0.00236EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2026/03/20 1:52 a.m.•9 views

CVE-2026-32811

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. When using Heimdall in envoy gRPC decision API mode with versions 0.7.0-alpha through 0.17.10, wrong encoding of the query URL string allows rules with non-wildcard path expressions to be bypassed. Envoy splits t...

8.8CVSS6.7AI score0.00312EPSS
SaveExploits1References7
Hacker One
Hacker One
•added 2017/08/15 8:27 p.m.•51 views

Legal Robot: 2FA manual entry uses wrong encoding

A security researcher discovered that following another change from report 259415, we used the wrong encoding for the manually entered secret. No sensitive data was exposed and there was no security risk, but users were unable to manually register a new TOTP device for about 12 hours...

1.7AI score
SaveExploits0
Hacker One
Hacker One
•added 2017/08/15 3:12 p.m.•26 views

Legal Robot: 2FA manual entry uses wrong encoding

As in report 260491, a security researcher discovered that following another change from report 259415, we used the wrong encoding for the manually entered secret. No sensitive data was exposed and there was no security risk, but users were unable to manually register a new TOTP device for about ...

0.5AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2013/08/15 12:00 a.m.•33 views

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

7.1AI score
SaveExploits0
Vulnerability Lab
Vulnerability Lab
•added 2013/08/15 12:00 a.m.•29 views

Google Mail - Mail Encoding & Filter Validation Vulnerability

Document Title: =============== Google Mail - Mail Encoding & Filter Validation Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1051 View: http://www.youtube.com/watch?v=ZQJPgLQ1wcU Release Date: ============= 2013-08-15 Vulnerability Laboratory ID VL-ID:...

0.3AI score
SaveExploits0
Rows per page
Query Builder