https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:31:09 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-111 certfr-2018-avi-111 https://cve.radiocsirt.org/vuln/certfr-2018-avi-111 https://cve.radiocsirt.org/vuln/cnvd-2017-27968 cnvd-2017-27968 https://cve.radiocsirt.org/vuln/cnvd-2017-27968 https://cve.radiocsirt.org/vuln/euvd-2026-75122 EUVD-2026-75122 https://cve.radiocsirt.org/vuln/euvd-2026-75122 https://cve.radiocsirt.org/vuln/fkie_cve-2017-8046 <p>Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.</p> <p>Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-8046 https://cve.radiocsirt.org/vuln/ghsa-9qf9-28h9-hqcj <p><strong>Affected:</strong> Maven: org.springframework.data:spring-data-rest-core</p> <p>Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) can use specially crafted JSON data to run arbitrary Java code.</p> <p><strong>Affected:</strong> Maven: org.springframework.data:spring-data-rest-core</p> <p>Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) can use specially crafted JSON data to run arbitrary Java code.</p> https://cve.radiocsirt.org/vuln/ghsa-9qf9-28h9-hqcj https://cve.radiocsirt.org/vuln/gsd-2017-8046 gsd-2017-8046 https://cve.radiocsirt.org/vuln/gsd-2017-8046 https://cve.radiocsirt.org/vuln/rhsa-2018:2405 <p>spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code undertow: Client can use bogus uri in Digest authentication spring-framework: Improper URL path validation allows for bypassing of security checks on static resources ignite: Possible Execution of Arbitrary Code Within Deserialization Endpoints spark: Absolute and relative pathnames allow for unintended static file disclosure</p> <p>spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code undertow: Client can use bogus uri in Digest authentication spring-framework: Improper URL path validation allows for bypassing of security checks on static resources ignite: Possible Execution of Arbitrary Code Within Deserialization Endpoints spark: Absolute and relative pathnames allow for unintended static file disclosure</p> https://cve.radiocsirt.org/vuln/rhsa-2018:2405 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528