Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 49

Export CSV
CVE-2021-35516

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

CVSS 3.1 · 7.5 High EPSS 12.4% KEV · Not listed
Vendors
Apache Netapp Oracle and 1 more
Products
Commons Compress Active Iq Unified Manager Oncommand Insight and 23 more
CVE-2021-35515

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

CVSS 3.1 · 7.5 High EPSS 11.6% KEV · Not listed
Vendors
Apache Netapp Oracle and 1 more
Products
Commons Compress Active Iq Unified Manager Oncommand Insight and 25 more
CVE-2021-22118

spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Netapp Oracle Redhat and 1 more
Products
Hci Management Services For Element Software Commerce Guided Search and 31 more
CVE-2021-22112

jenkins: Privilege escalation vulnerability in bundled Spring Security library

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Oracle Pivotal Software Vmware
Products
Communications Element Manager Communications Interactive Session Recorder Communications Unified Inventory Management and 5 more
CVE-2020-5397

CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight requests should not include credentials and therefore requests should fail authentication. However a notable exception to this are Chrome based browsers when using client certificates for authentication since Chrome sends TLS client certificates in CORS preflight requests in violation of spec requirements. No HTTP body can be sent or received as a result of this attack.

CVSS 3.1 · 5.3 Medium EPSS 2.6% KEV · Not listed
Vendors
Oracle Vmware
Products
Application Testing Suite Communications Brm - Elastic Charging Engine Communications Diameter Signaling Router and 24 more
CVE-2019-17195

nimbus-jose-jwt: Uncaught exceptions while parsing a JWT

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 11.1% KEV · Not listed
Vendors
Apache Connect2id Oracle and 1 more
Products
Hadoop Nimbus Jose\+jwt Communications Cloud Native Core Security Edge Protection Proxy and 14 more
CVE-2019-12415

poi: a specially crafted Microsoft Excel document allows attacker to read files from the local filesystem

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Poi Application Testing Suite Banking Enterprise Originations and 25 more
CVE-2018-8013

batik: information disclosure when deserializing

In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

CVSS 3.0 · 9.8 Critical EPSS 18.6% KEV · Not listed
Vendors
Apache Canonical Debian and 1 more
Products
Batik Ubuntu Linux Debian Linux and 18 more