Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

springsource spring framework 3.0.0.m2 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2013-7315
The Spring MVC in Spring Framework before 3.2.4 and 4.0.0.M1 through 4.0.0.M2 does not disable external entity resolution for the StAX XMLInputFactory, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via...
Vmware Spring Framework 3.1.4Vmware Spring Framework 3.1.3Vmware Spring Framework 4.0.0Springsource Spring Framework 3.0.5Springsource Spring Framework 3.0.0Vmware Spring FrameworkVmware Spring Framework 3.2.2Vmware Spring Framework 3.1.0Vmware Spring Framework 3.0.7Springsource Spring Framework 3.0.2Springsource Spring Framework 3.0.1Springsource Spring Framework 3.0.0.m2Vmware Spring Framework 3.2.1Vmware Spring Framework 3.2.0Vmware Spring Framework 3.0.6Springsource Spring Framework 3.0.0.m1Vmware Spring Framework 3.1.2Vmware Spring Framework 3.1.1Springsource Spring Framework 3.0.4Springsource Spring Framework 3.0.3
NA
CVE-2014-0054
The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via crafted XML,...
Springsource Spring Framework 3.2.6Springsource Spring Framework 3.2.5Vmware Spring Framework 3.1.2Vmware Spring Framework 3.1.1Springsource Spring Framework 3.0.2Vmware Spring Framework 4.0.0Springsource Spring Framework 4.0.0Vmware Spring Framework 3.2.2Vmware Spring Framework 3.2.1Vmware Spring Framework 3.0.6Springsource Spring Framework 3.0.5Springsource Spring Framework 3.0.0Vmware Spring Framework 3.2.4Vmware Spring Framework 3.2.3Vmware Spring Framework 3.1.0Vmware Spring Framework 3.0.7Springsource Spring Framework 3.0.0.m2Springsource Spring Framework 3.0.0.m1Springsource Spring Framework 4.0.1Vmware Spring FrameworkVmware Spring Framework 3.2.0Vmware Spring Framework 3.1.4Vmware Spring Framework 3.1.3Springsource Spring Framework 3.0.4Springsource Spring Framework 3.0.3Springsource Spring Framework 3.0.1
NA
CVE-2013-4152
The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary files, cause a denial of service, and conduct CSRF attacks via an XML external...
Vmware Spring FrameworkVmware Spring Framework 3.2.2Vmware Spring Framework 3.1.0Vmware Spring Framework 3.0.7Springsource Spring Framework 3.0.0.m2Springsource Spring Framework 3.0.0.m1Springsource Spring Framework 3.0.0Vmware Spring Framework 3.1.4Vmware Spring Framework 3.1.3Springsource Spring Framework 3.0.4Springsource Spring Framework 3.0.3Vmware Spring Framework 3.1.2Vmware Spring Framework 3.1.1Springsource Spring Framework 3.0.2Springsource Spring Framework 3.0.1Vmware Spring Framework 3.2.1Vmware Spring Framework 3.2.0Vmware Spring Framework 3.0.6Vmware Spring Framework 4.0.0Springsource Spring Framework 3.0.5
NA
CVE-2009-1190
Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows...
Sun Jdk 1.3.1 11Sun Jdk 1.3.1 12Sun Jdk 1.3.1 13Sun Jdk 1.3.1 06Sun Jdk 1.3.1 05Sun Jdk 1.3.0 05Sun Jdk 1.3.0 04Sun Jdk 1.3.1 14Sun Jdk 1.3.0 01Sun Jdk 1.3.1 04Sun Jdk 1.3.1 03Sun Jdk 1.3.0 03Sun Jdk 1.3.0 02Sun Jdk 1.1.8Sun Jdk 1.2.2Sun Jdk 1.2.1Sun Jdk 1.3.1 24Sun Jdk 1.3.1 23Sun Jdk 1.3.1 21Sun Jdk 1.3.1 28Sun Jdk 1.4.2 14Sun Jdk 1.4.2 13Sun Jdk 1.4.0 01Sun Jdk 1.4.0 04Sun Jdk 1.4.1 06Sun Jdk 1.4.1 05Sun Jdk 1.4.2 5Sun Jdk 1.4.2 6Sun Jdk 1.5.0Sun Jdk 1.5.0 03Sun Jdk 1.2.0Sun Jdk 1.3.0Sun Jdk 1.3.1 19Sun Jdk 1.3.1 20Sun Jdk 1.3.1 25Sun Jdk 1.4.2 16Sun Jdk 1.4.0Sun Jdk 1.4.2Sun Jdk 1.4.0 02Sun Jdk 1.4.1 04Sun Jdk 1.4.1 03Sun Jdk 1.4.2 7Sun Jdk 1.4.2 8Sun Jdk 1.3.1 10Sun Jdk 1.3.1 09Sun Jdk 1.3.1 02Sun Jdk 1.3.1 01Sun Jdk 1.1.7bSun Jdk 1.3.1Sun Jdk 1.3.1 16Sun Jdk 1.3.1 17Sun Jdk 1.3.1 18Sun Jdk 1.4.2 18Sun Jdk 1.4.2 19Sun Jdk 1.4.0 03Sun Jdk 1.4.1 07Sun Jdk 1.4.1 02Sun Jdk 1.4.2 3Sun Jdk 1.4.2 4Sun Jdk 1.4.2 11Sun Jdk 1.4.2 12Sun JdkSun Jdk 1.3.1 15Sun Jdk 1.3.1 08Sun Jdk 1.3.1 07Sun Jdk 1.3.1 01aSun Jdk 1.1.6Sun Jdk 1.1.0Sun Jdk 1.3.1 22Sun Jdk 1.3.1 26Sun Jdk 1.3.1 27Sun Jdk 1.4.2 15Sun Jdk 1.4.2 17Sun Jdk 1.4.1 01Sun Jdk 1.4.1Sun Jdk 1.4.2 1Sun Jdk 1.4.2 2Sun Jdk 1.4.2 9Sun Jdk 1.4.2 10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
brute forcelog injectionCVE-2023-6510CVE-2023-49248CVE-2023-49374CVE-2023-26360XSSCVE-2023-46674CVE-2023-49105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook