543 matches found
Apache Arrow 代码问题漏洞
Apache Arrow is a cross-language development platform for in-memory data processing from the Apache USA Foundation. The platform supports programming languages such as C, C++, C, Go and Java, and provides features such as inter-process communication. A code issue vulnerability exists in Apache...
OpsManage 代码问题漏洞
OpsManage is a code deployment, application deployment, scheduled tasks, and device asset management platform by William.Cao Personal Developer. A code issue vulnerability exists in OpsManage. An attacker exploiting this vulnerability could cause data deserialization. The following versions are...
CVE-2024-53910
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...
CVE-2024-53910
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...
CVE-2024-53910
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...
Veritas Enterprise Vault 安全漏洞
Veritas Enterprise Vault is a Veritas platform for capturing, archiving, and discovering information across all communication platforms. A security vulnerability exists in Veritas Enterprise Vault versions prior to 15.2 that originates from untrusted data received on the .NET Remoting TCP port th...
CVE-2024-53914
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized...
CVE-2024-11393 Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability...
Allegra 代码问题漏洞
Allegra is a project management software for mid-sized organizations from Allegra. A code issue vulnerability exists in Allegra that stems from the renderFieldMatch feature containing an untrusted data deserialization remote code execution vulnerability...
Hugging Face Transformers 代码问题漏洞
Hugging Face Transformers is advanced natural language processing built for Jax, PyTorch and TensorFlow. A code issue vulnerability exists in Hugging Face Transformers that stems from improper data validation in the parsing of model files, which could lead to untrusted data deserialization and...
WordPress Core maybe_unserialize Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of WordPress Core. Authentication may be required to exploit this vulnerability, depending on the product configuration. The specific flaw exists within the maybeunserialize function. The issue results...
WordPress plugin NIX Anti-Spam Light 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
WordPress plugin WDES Responsive Mobile Menu 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
Apache Lucene 安全漏洞
Apache Lucene is a free open source search engine software library from the Apache Foundation. A security vulnerability exists in Apache Lucene versions 4.8.0-beta00005 through 4.8.0-beta00016, which stems from the presence of an untrustworthy data deserialization vulnerability that could lead to...
Chainer Remote Code Execution Vulnerability
Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...
PT-2024-33025 · Chainer · Chainer
Name of the Vulnerable Software and Affected Versions: chainer version 7.8.1.post1 Description: A Deserialization of Untrusted Data issue allows for the execution of arbitrary code. Recommendations: For version 7.8.1.post1, update to a version that fixes the Deserialization of Untrusted Data issu...
Chainer 安全漏洞
Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...
Deserialization of Untrusted Data
Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the use of pickle as a serialization format for socket communication. An attacker can execute arbitrary code by sending maliciously crafted data that is deserialized...
PT-2025-2103 · Drupal · Drupal Monster Menus
Name of the Vulnerable Software and Affected Versions: Drupal Monster Menus versions 0.0.0 through 9.3.3 Drupal Monster Menus versions 9.4.0 through 9.4.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remot...
