1318 matches found
ysoserial
This is a proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization. The tool, called ysoserial, is a collection of utilities and property-oriented programming "gadget chains" discovered in common Java libraries that can, under the right conditions, exploit Jav...
acegisecurity:acegi-security (>=0.7.0, <=0.9.0), acegisecurity:acegi-security-cas (>=0.7.0, <=0.9.0) +24662 more potentially affected by CVE-2015-6420 via commons-collections:commons-collections (>=3.0, <=3.2.1)
commons-collections:commons-collections MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.1, =0.6.0, =0.12.0 - ai.grakn.kgms:client 1.4.3 - ai.grakn.kgms:console 1.4.3 and more Source cves: CVE-2015-6420 Source advisory: OSV:GHSA-6HGM-866R-3CJV...
Insecure Deserialization in Apache Commons Collection
Serialized-object interfaces in Java applications using the Apache Commons Collections ACC library may allow remote attackers to execute arbitrary commands via a crafted serialized Java object...
GHSA-6HGM-866R-3CJV Insecure Deserialization in Apache Commons Collection
Serialized-object interfaces in Java applications using the Apache Commons Collections ACC library may allow remote attackers to execute arbitrary commands via a crafted serialized Java object...
activemq:activemq (1.1), activemq:activemq-core (3.2) +583 more potentially affected by CVE-2015-6420 via commons-collections:commons-collections (2.1)
commons-collections:commons-collections MAVEN version 2.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - activemq:activemq 1.1 - activemq:activemq-core 3.2 - activemq:activemq-gbean 3.2 -...
acegisecurity:acegi-security (>=0.7.0, <=0.9.0), acegisecurity:acegi-security-cas (>=0.7.0, <=0.9.0) +24662 more potentially affected by CVE-2015-6420 via commons-collections:commons-collections (>=3.0, <=3.2.1)
commons-collections:commons-collections MAVEN version =3.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.0.1, =0.6.0, =0.12.0 - ai.grakn.kgms:client 1.4.3 - ai.grakn.kgms:console 1.4.3 and more Source cves: CVE-2015-6420 Source advisory: GHSA-6HGM-866R-3CJV...
ch.marcus-schulte.maven:hivedoc-plugin (>=1.0.0, <=1.0.2), checkstyle:checkstyle (>=5.0-beta01, <=5.0) +170 more potentially affected by CVE-2015-6420 via commons-collections:commons-collections (2.0)
commons-collections:commons-collections MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - ch.marcus-schulte.maven:hivedoc-plugin =1.0.0, =5.0-beta01, =1.0.0, =1.10.3, =2.8.0...
br.com.caelum.stella:hibernate-persistence-example (>=1.0, <=1.2), br.com.caelum.stella:vraptor-validator-example (>=1.0, <=1.2) +284 more potentially affected by CVE-2015-6420 via commons-collections:commons-collections (2.1.1)
commons-collections:commons-collections MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on commons-collections:commons-collections and may be impacted: - br.com.caelum.stella:hibernate-persistence-example =1.0, =1.0, =1.0.0, =1.0-beta,...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
It is an offensive tool for Java. This repository contains a proof-of-concept PoC exploit for CVE-2020-9484, a vulnerability in the Apache Commons Collections library for Java. The exploit is designed to demonstrate the vulnerability and is not intended for malicious use. The exploit is implement...
Oracle WebCenter Sites Multiple Vulnerabilities (April 2017 CPU)
Oracle WebCenter Sites component of Oracle Fusion Middleware is vulnerable to multiple vulnerabilities. - A remote code execution in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Install Apache Common Collections. An unauthenticated, remote attacker can exploit...
Moderate: Red Hat Security Advisory: rh-haproxy18-haproxy security, bug fix, and enhancement update
An update for rh-haproxy18-haproxy is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Windows 8.1 Store and Windows Update client improvements: May 13, 2014
Windows 8.1 Store and Windows Update client improvements: May 13, 2014 This article describes some improvements for Windows Store and Windows Update in Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2. Check out the new features of this update and how to obtain this update. This update has...
Authorization
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all...
UBUNTU-CVE-2018-11802
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all...
Lexmark Markvision Enterprise Code Issue Vulnerability
Lexmark Markvision Enterprise is the United States Lexmark Lexmark company's set of Web-based network device management software. The software is mainly used to manage network devices such as printers. A security vulnerability exists in the Apache Commons Collections inventory in Lexmark Markvisi...
CVE-2016-1487
Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...
CVE-2016-1487
Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...
Deserialization of untrusted data
Lexmark Markvision Enterprise before 2.3.0 misuses the Apache Commons Collections Library, leading to remote code execution because of Java deserialization...
CVE-2016-1487
CVE-2016-1487 affects Lexmark Markvision Enterprise prior to 2.3.0, where unsafe deserialization of untrusted Java objects in Apache Commons Collections via the RMI interface enables remote code execution. The root cause is deserialization of unauthenticated serialized objects, allowing an attack...