Spring is exposed to allow remote code execution.

Security company Aspect Security today revealed that a major Security vulnerability was found in the development code of the Spring framework.Jeff Williams, CEO of Aspect Security, said the vulnerability exists in Spring's "Expression Language"

SAP NetWeaver spml xml entity reference information leakage Vulnerability

Release date:Updated on: 2013-01-26 Affected Systems:SAP NetWeaver 7.xDescription:--------------------------------------------------------------------------------SAP NetWeaver is the integrated technology platform of SAP and the technical

Google Web Toolkit Cross-Site Scripting Vulnerability

Release date:Updated on: 2013-01-26 Affected Systems:Google Web Toolkit 2.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57538CVE (CAN) ID: CVE-2012-5920 Google Web Toolkit is a development

Security Bypass Vulnerability in Apple iPhone/iPad/iPod touch versions earlier than iOS 6.1

Release date:Updated on: 2013-01-31 Affected Systems:Apple iPhone 4.xApple iPhone 3.xApple iOS 3.xApple iOS 2.xApple TV 5.xApple TV 4.xDescription:--------------------------------------------------------------------------------Bugtraq id: 57598CVE

Multiple Netgear SPH200D Security Vulnerabilities

Release date:Updated on: 2013-02-02 Affected Systems:Netgear SPH200DDescription:--------------------------------------------------------------------------------Bugtraq id: 57660 Netgear SPH200D is a wireless Skype Network phone. Netgear SPH200D

WordPress Poll plug-in Cross-Site Request Forgery Vulnerability

WordPress Poll plug-in Cross-Site Request Forgery Vulnerability Release date:Updated on: 2013-02-03 Affected Systems:WordPress Poll Plugin 34.xDescription:--------------------------------------------------------------------------------The

Apache Commons HttpClient SSL certificate verification Security Bypass Vulnerability

Release date:Updated on: Affected Systems:Apache Group Commons HttpClient 3.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58073CVE (CAN) ID: CVE-2012-5783 HttpClient is a sub-project under

Mozilla Firefox/Thunderbird/SeaMonkey Memory Security Vulnerability

Release date:Updated on: 2013-02-20 Affected Systems:Mozilla Firefox & lt; 19.0Mozilla Thunderbird Mozilla SeaMonkey Description:--------------------------------------------------------------------------------Bugtraq id: 58030CVE (CAN) ID: CVE-2013-0

Linux Kernel VFAT Local Buffer Overflow Vulnerability

Release date:Updated on: Affected Systems:Linux kernel 3.3.xLinux kernel 2.6.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58200CVE (CAN) ID: CVE-2013-1773 Linux Kernel is the Kernel of the

Todd Miller Sudo local security bypass tty_tickets Vulnerability

Release date:Updated on: Affected Systems:Todd Miller Sudo 1.8.xDescription:--------------------------------------------------------------------------------Bugtraq id: 58207 Sudo is a tool that allows system administrators to allow common users to

Apple prohibits updates of old Adobe Flash Player to prevent Vulnerabilities

Apple's Safari browser Today updated the Safari web page plug-in shielding tool to disable the old version of Adobe Flash Player. The Loop website's famous apple reporter Jim Dalrymple said that Apple's move is likely to be a response to a recent

Multiple security vulnerabilities in Google Chrome versions earlier than 25.0.1364.152

Release date:Updated on: Affected Systems:Google Chrome Description:--------------------------------------------------------------------------------Bugtraq id: 58291CVE (CAN) ID: CVE-2013-0902, CVE-2013-0903, CVE-2013-0904, CVE-2013-0905, CVE-2013-0

Polycom HDX Video Endpoints authorization Security Bypass Vulnerability

Release date:Updated on: Affected Systems:Polycom HDX Video End Points 3.0.4Polycom HDX Video End Points 3.0Polycom HDX Video End Points 2.6Description:--------------------------------------------------------------------------------Bugtraq id: 57911 

Multiple security vulnerabilities in Cisco Video Surveillance Operations Manager

Released on: 2013-03-13Updated on: 2013-03-14 Affected Systems:Cisco Video Surveillance Operations Manager 6.3.2Description:--------------------------------------------------------------------------------Bugtraq id: 58476 Cisco Video Surveillance

NetGear WNR1000 vro Remote Authentication Bypass Vulnerability

Release date:Updated on: Affected Systems:Netgear WNR1000Description:--------------------------------------------------------------------------------Bugtraq id: 58792 NetGear WNR1000 is a wireless router product. A security vulnerability exists in

MongoDB remote command execution vulnerability: nightmare or eye-catching?

The zero-day MongoDB Vulnerability (CVE-2013-1892) publicly disclosed in March 24 has aroused people's attention, IT security and developers have begun to discuss this topic. Link: urgent release of MongoDB 2.4.1 We think there are three main

RubyGems 'thumbshooter' Remote Command Execution Vulnerability

Release date:Updated on: 2013-03-27 Affected Systems:Rubygems thumbshooterDescription:--------------------------------------------------------------------------------Bugtraq id: 58706 RubyGems thumbshooter can use webkit and qt4 to create thumbshots

Linux Kernel 'fs/compat_ioctl.c 'Information Leakage Vulnerability

Release date:Updated on: Affected Systems:Linux kernelDescription:--------------------------------------------------------------------------------Bugtraq id: 58906 Linux Kernel is the Kernel of the Linux operating system. Linux kernel has the

Aastra 6753i hardware-encoded telephone Password Security Bypass Vulnerability

Release date:Updated on: 2013-04-10 Affected Systems:Aastra 6753i IP Telephone Description:--------------------------------------------------------------------------------Bugtraq id: 58935 Aastra 6753i IP Telephone is a carrier-level basic IP Phone.

WordPress WP Symposium plug-in 'U' parameter open Redirection Vulnerability

Release date:Updated on: Affected Systems:WordPress WP SymposiumDescription:--------------------------------------------------------------------------------Bugtraq id: 59045CVE (CAN) ID: CVE-2013-2694 WordPress WP Symposium plug-in is a network

Total Pages: 1330 1 .... 896 897 898 899 900 .... 1330 Go to: GO

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.