Lucene search
K

11 matches found

EUVD
EUVD
added 2026/05/10 3:31 p.m.7 views

EUVD-2021-34796

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References4
NVD
NVD
added 2026/05/10 1:16 p.m.5 views

CVE-2021-47935

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS0.00416EPSS
Exploits1References3
OSV
OSV
added 2026/05/10 1:16 p.m.4 views

PYSEC-2026-131

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References3
PyPA
PyPA
added 2026/05/10 1:16 p.m.13 views

PYSEC-2026-131

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/05/10 12:43 p.m.4 views

CVE-2021-47935

CVE-2021-47935 affects Sentry 8.2.0 and describes a remote code execution via pickle deserialization. The root cause is deserialization of malicious pickle-serialized objects injected into the audit log entry data parameter. An authenticated superuser can submit crafted POST requests to the admin...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/10 12:43 p.m.4 views

CVE-2021-47935 Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/05/10 12:43 p.m.1 views

CVE-2021-47935

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/05/10 12:43 p.m.25 views

CVE-2021-47935 Sentry 8.2.0 Remote Code Execution via Pickle Deserialization

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS0.00416EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/05/10 12:0 a.m.5 views

Sentry 代码注入漏洞

Sentry is an open-source error tracking and performance monitoring platform for developers. Version Sentry 8.2.0 contains a code injection vulnerability. This vulnerability stems from a remote code execution flaw, allowing authenticated superusers to execute arbitrary commands by injecting...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/05/10 12:0 a.m.7 views

PT-2026-39510

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00416EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2007/06/19 9:30 p.m.33 views

CVE-2007-3280

The Database Link library dblink in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the C programming language, which allows remote authenticated superusers to map and execute a function from any library, as demonstrated by using the system...

9CVSS6.2AI score0.48919EPSS
Exploits2References1
Rows per page
Query Builder