https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 02:22:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01628 bdu:2022-01628 https://cve.radiocsirt.org/vuln/bdu:2022-01628 https://cve.radiocsirt.org/vuln/certfr-2022-avi-287 certfr-2022-avi-287 https://cve.radiocsirt.org/vuln/certfr-2022-avi-287 https://cve.radiocsirt.org/vuln/cisco-sa-java-spring-scf-rce-dqrhhjxh <p>On March 29, 2022, the following critical vulnerability in the Spring Cloud Function Framework affecting releases 3.1.6, 3.2.2, and older unsupported releases was disclosed: CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring Expression For a description of this vulnerability, see VMware Spring Framework Security Vulnerability Report [&#34;https://tanzu.vmware.com/security/cve-2022-22963&#34;]. Cisco&#39;s Response to This Vulnerability Cisco accessed all products for impact from CVE-2022-22963. To help detect exploitation of this vulnerability, Cisco has released Snort rules at the following location: Talos Rule SID 59388 [&#34;https://www.snort.org/rule_docs/1-59388&#34;] This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH&#34;]</p> <p>On March 29, 2022, the following critical vulnerability in the Spring Cloud Function Framework affecting releases 3.1.6, 3.2.2, and older unsupported releases was disclosed: CVE-2022-22963: Remote code execution in Spring Cloud Function by malicious Spring Expression For a description of this vulnerability, see VMware Spring Framework Security Vulnerability Report [&#34;https://tanzu.vmware.com/security/cve-2022-22963&#34;]. Cisco&#39;s Response to This Vulnerability Cisco accessed all products for impact from CVE-2022-22963. To help detect exploitation of this vulnerability, Cisco has released Snort rules at the following location: Talos Rule SID 59388 [&#34;https://www.snort.org/rule_docs/1-59388&#34;] This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH [&#34;https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-scf-rce-DQrHhJxH&#34;]</p> https://cve.radiocsirt.org/vuln/cisco-sa-java-spring-scf-rce-dqrhhjxh https://cve.radiocsirt.org/vuln/euvd-2026-255854 EUVD-2026-255854 https://cve.radiocsirt.org/vuln/euvd-2026-255854 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22963 <p>In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.</p> <p>In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-22963 https://cve.radiocsirt.org/vuln/ghsa-6v73-fgf6-w5j7 <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-function-context</p> <p>In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.</p> <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-function-context</p> <p>In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.</p> https://cve.radiocsirt.org/vuln/ghsa-6v73-fgf6-w5j7 https://cve.radiocsirt.org/vuln/gsd-2022-22963 gsd-2022-22963 https://cve.radiocsirt.org/vuln/gsd-2022-22963 https://cve.radiocsirt.org/vuln/rhsa-2022:1291 <p>spring-cloud-function: Remote code execution by malicious Spring Expression</p> <p>spring-cloud-function: Remote code execution by malicious Spring Expression</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1291 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375