Lucene search
+L

13 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:02 a.m.•13 views

CVE-2023-36825

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.8CVSS7.5AI score0.01125EPSS
SaveExploits0
Github Security Blog
Github Security Blog
•added 2023/07/11 10:46 p.m.•38 views

Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. Impact A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query...

9.8CVSS6.9AI score0.01125EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2023/07/11 10:46 p.m.•86 views

GHSA-PH6G-P72V-PC3P Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. Impact A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query...

9.8CVSS9.7AI score0.01125EPSS
SaveExploits0References4
NVD
NVD
•added 2023/07/11 6:15 p.m.•43 views

CVE-2023-36825

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.8CVSS9.8AI score0.01125EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/11 6:15 p.m.•26 views

Deserialization of untrusted data

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

7.5CVSS9.8AI score0.01125EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/11 5:49 p.m.•18 views

CVE-2023-36825 Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.6CVSS9.8AI score0.01125EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/07/11 5:49 p.m.•53 views

CVE-2023-36825 Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.6CVSS10AI score0.01125EPSS
SaveExploits0References2
OSV
OSV
•added 2023/07/11 5:49 p.m.•33 views

CVE-2023-36825 Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.6CVSS9.5AI score
SaveExploits0References4
CVE
CVE
•added 2023/07/11 5:49 p.m.•77 views

CVE-2023-36825

Summary: CVE-2023-36825 affects the Orchid Laravel package prior to version 14.5.0. Root cause: deserialization of untrusted data from the _state query parameter. Impact: potential remote code execution. Status and remediation: patched in version 14.5.0; users should upgrade to 14.5.0 or any late...

9.8CVSS9.8AI score0.01125EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/07/11 5:49 p.m.•2 views

CVE-2023-36825

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the "state" query paramete...

9.8CVSS0.01125EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/11 12:00 a.m.•1 views

CVE-2023-36825: Deserialization of Untrusted Data

Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present starting in version 14.0.0-alpha4 and prior to version 14.5.0 is related to the deserialization of untrusted data from the state query parameter,...

9.8CVSS8.2AI score0.01125EPSS
SaveExploits0References2
OSV
OSV
•added 2019/11/06 11:13 a.m.•13 views

SUSE-SU-2019:2906-1 Security update for ardana-ansible, ardana-horizon, ardana-keystone, ardana-manila, ardana-neutron, crowbar-core, crowbar-openstack, grafana, openstack-cinder, openstack-dashboard, openstack-horizon-plugin-manila-ui, openstack-keystone, openstack-manila, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, pdns, python-Django1, python-keystonemiddleware, python-octaviaclient, python-os-brick, python-oslo.cache, python-oslo.messaging

This update for ardana-ansible, ardana-horizon, ardana-keystone, ardana-manila, ardana-neutron, crowbar-core, crowbar-openstack, grafana, openstack-cinder, openstack-dashboard, openstack-horizon-plugin-manila-ui, openstack-keystone, openstack-manila, openstack-neutron, openstack-neutron-fwaas,...

8.8CVSS8.5AI score0.63388EPSS
SaveExploits2References22
OSV
OSV
•added 2019/10/04 12:41 p.m.•7 views

SUSE-SU-2019:2562-1 Security update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-tls, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, grafana, novnc, openstack-cinder, openstack-dashboard, openstack-designate, openstack-glance, openstack-heat, openstack-horizon-plugin-heat-ui, openstack-horizon-plugin-monasca-ui, openstack-ironic, openstack-ironic-python-agent, openstack-keystone, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-nova, openstack-octavia, openstack-sahara, openstack-tempest, openstack-watcher, python-ardana-configurationprocessor, python-cinder-tempest-plugin, python-urllib3, rubygem-easy_diff

This update for ansible1, ardana-ansible, ardana-cluster, ardana-db, ardana-extensions-nsx, ardana-glance, ardana-input-model, ardana-installer-ui, ardana-manila, ardana-monasca, ardana-neutron, ardana-nova, ardana-octavia, ardana-opsconsole-ui, ardana-osconfig, ardana-service, ardana-tls,...

8AI score
SaveExploits0References78
Rows per page
Query Builder