Archive
25 May 2017
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Unscored —CVE-2016-6256 Public exploit
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML…
-
High 8.8
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…