https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:59:34 +0000 https://cve.radiocsirt.org/vuln/bdu:2019-01776 bdu:2019-01776 https://cve.radiocsirt.org/vuln/bdu:2019-01776 https://cve.radiocsirt.org/vuln/cnvd-2019-05300 cnvd-2019-05300 https://cve.radiocsirt.org/vuln/cnvd-2019-05300 https://cve.radiocsirt.org/vuln/euvd-2026-181219 EUVD-2026-181219 https://cve.radiocsirt.org/vuln/euvd-2026-181219 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11040 <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-11040 https://cve.radiocsirt.org/vuln/ghsa-f26x-pr96-vw86 <p><strong>Affected:</strong> Maven: org.springframework:spring-core</p> <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-core</p> <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> https://cve.radiocsirt.org/vuln/ghsa-f26x-pr96-vw86 https://cve.radiocsirt.org/vuln/gsd-2018-11040 gsd-2018-11040 https://cve.radiocsirt.org/vuln/gsd-2018-11040 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11040 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java</p> <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java</p> <p>Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpResponseBodyAdvice for REST controllers and MappingJackson2JsonView for browser requests. Both are not enabled by default in Spring Framework nor Spring Boot, however, when MappingJackson2JsonView is configured in an application, JSONP support is automatically ready to use through the &#34;jsonp&#34; and &#34;callback&#34; JSONP parameters, enabling cross-domain requests.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-11040 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528