CVE Vulnerability Catalog

Spring Data REST's JSON Patch implementation does not apply write-access filter to intermediate path segments when resolving a multi-segment JSON Pointer. Affected versions: 3.7.0 through 3.7.19, 4.3.0 through 4.3.16, 4.4.0 through 4.4.14, 4.5.0 through 4.5.11, and 5.0.0 through 5.0.5.

SpEL expression injection vulnerability in Spring Data MongoDB. Occurs during parameter binding in repository query methods annotated with @Query using a wildcard placeholder.

Vulnerability in Spring Data Commons causes the internal property-lookup cache to accept and permanently store attacker-supplied strings as keys, leading to heap exhaustion through repeated requests.

Vulnerability in Spring Data Commons allows denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution.

In Spring Security, an attacker able to influence values in RelyingPartyRegistration can execute arbitrary code on HTML forms generated by Spring Security filters. Affected versions: 5.7.0-5.7.23, 5.8.0-5.8.25, 6.3.0-6.3.16, 6.4.0-6.4.16, 6.5.0-6.5.10, and 7.0.0-7.0.5.

An attacker with write permissions to the database table managed by JdbcAssertingPartyMetadataRepository can store malicious serialized payloads in columns containing verification or encryption credentials. Affects Spring Security versions 7.0.0 through 7.0.5.

An application using spring-security-saml2-service-provider with the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. Affected versions: Spring Security 5.7.0 through 5.7.23; 5.8.0 through 5.8.25; 6.3.0 through 6.3.16; 6.4.0 through 6.4.16; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5.

The $_internalApplyOplogUpdate aggregation pipeline stage can be exploited to execute a document diff containing a malformed binary diff, resulting in out-of-bounds memory read or server crash. Any authenticated user with access to the aggregate command can trigger this.

A vulnerability in the product allows clients to set specific values in the "mechanism" parameter of the "authenticate" command, leading to server crash. The authenticate command is accessible to unauthenticated clients, enabling pre-auth denial-of-service.

A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator mishandles nested binary data structures, leading to uncontrolled mutual recursion between validation functions.

SQLFluff, a modular SQL linter and auto-formatter, prior to version 4.2.0 is vulnerable to a DoS attack via resource exhaustion. An untrusted user can submit a malicious long SQL query, causing parser overload.

SQLFluff prior to version 4.1.0 is vulnerable to a DoS attack via resource exhaustion. An untrusted user can submit a malicious SQL query with excessive nesting, causing parser overload.

Uncontrolled resource consumption vulnerability in CAI Content Credentials library (c2pa-web and c2pa). An attacker can exhaust system resources, causing a denial-of-service (DoS) condition. User interaction is not required for exploitation.

Improper input validation vulnerability in CAI Content Credentials library (c2pa-web and c2pa). An attacker can crash the application, causing a denial-of-service (DoS) condition. User interaction is not required for exploitation.

CAI Content Credentials (versions [email protected], c2pa-v0.80.1 and earlier) is vulnerable to integer overflow. An attacker can exploit this to crash the application, leading to denial of service (DoS). Exploitation does not require user interaction.

Format Plugins versions 1.1.2 and earlier are affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. User interaction is required – opening a malicious file.

Format Plugins versions 1.1.2 and earlier are affected by a heap-based buffer overflow vulnerability that could allow arbitrary code execution in the context of the current user. User interaction is required – opening a malicious file.

Improper restriction of XML external entity reference (XXE) vulnerability in ColdFusion versions 2023.19, 2025.8 and earlier. An attacker can read arbitrary files from the filesystem, accessing sensitive files outside the intended scope. User interaction is required (opening a malicious file). Scope is changed.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a stack-based buffer overflow vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.

Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Use After Free vulnerability. This could allow arbitrary code execution in the context of the current user after opening a malicious file.