https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:33:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00935 bdu:2018-00935 https://cve.radiocsirt.org/vuln/bdu:2018-00935 https://cve.radiocsirt.org/vuln/certfr-2019-avi-023 certfr-2019-avi-023 https://cve.radiocsirt.org/vuln/certfr-2019-avi-023 https://cve.radiocsirt.org/vuln/cnvd-2018-07568 cnvd-2018-07568 https://cve.radiocsirt.org/vuln/cnvd-2018-07568 https://cve.radiocsirt.org/vuln/euvd-2026-182504 EUVD-2026-182504 https://cve.radiocsirt.org/vuln/euvd-2026-182504 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1275 <p>Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.</p> <p>Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1275 https://cve.radiocsirt.org/vuln/ghsa-3rmv-2pg5-xvqj <p><strong>Affected:</strong> Maven: org.springframework:spring-messaging</p> <p>Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-messaging</p> <p>Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.</p> https://cve.radiocsirt.org/vuln/ghsa-3rmv-2pg5-xvqj https://cve.radiocsirt.org/vuln/gsd-2018-1275 gsd-2018-1275 https://cve.radiocsirt.org/vuln/gsd-2018-1275 https://cve.radiocsirt.org/vuln/rhsa-2018:1320 <p>spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution spring-framework: Address partial fix for CVE-2018-1270 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> <p>spring-framework: Directory traversal vulnerability with static resources on Windows filesystems spring-framework: Multipart content pollution spring-framework: Address partial fix for CVE-2018-1270 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources tomcat: Late application of security constraints can lead to resource exposure for unauthorised users</p> https://cve.radiocsirt.org/vuln/rhsa-2018:1320 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528 <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand herbeizuführen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen, seine Berechtigungen zu erweitern oder einen nicht spezifizierten Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0528