Lucene search
+L

29531 matches found

OSV
OSV
added 2026/02/10 6:16 p.m.20 views

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.8AI score0.03635EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.12 views

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.5AI score0.03635EPSS
SaveExploits0References2Affected Software10
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.13 views

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.02344EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.11 views

Microsoft Outlook Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.5AI score0.03635EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.21 views

Azure SDK for Python Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS5.8AI score0.02344EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/02/10 3:28 p.m.155 views

Exploit for CVE-2026-2969

This repository contains public information for the disclosure o...

5.8CVSS5AI score0.00821EPSS
SaveExploits3
OSV
OSV
added 2026/02/10 4:16 a.m.7 views

CVE-2026-23685

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS5.8AI score0.00124EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.22 views

CVE-2026-23685

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS0.00124EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 3:02 a.m.6 views

CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS5.6AI score0.00124EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/10 3:02 a.m.46 views

CVE-2026-23685

CVE-2026-23685 describes a deserialization vulnerability in the SAP NetWeaver JMS service. An attacker authenticated as an administrator with local access can submit specially crafted content to the server; if processed by the application, this may trigger unintended logic execution that leads to...

4.4CVSS5.6AI score0.00124EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/10 3:02 a.m.39 views

CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS0.00124EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/10 12:33 a.m.177 views

Exploit for Improper Authentication in Oracle Concurrent_Processing

Affected Software: Oracle BI Publisher versions 12.2.1.4.0, 12...

9.8CVSS6.7AI score0.99722EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2026/02/10 12:19 a.m.176 views

Exploit for Deserialization of Untrusted Data in Facebook React

Affected Software: React Server Components versions 19.0.0, 1...

10CVSS6.5AI score0.99802EPSS
SaveExploits389
CNNVD
CNNVD
added 2026/02/10 12:00 a.m.22 views

SAP NetWeaver 代码问题漏洞

SAP NetWeaver is a service-oriented integrated application platform developed by the German company SAP. This platform primarily provides development and runtime environments for SAP applications. There are code-related vulnerabilities in SAP NetWeaver, particularly those related to deserializati...

4.4CVSS5.8AI score0.00124EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.22 views

PT-2026-7212

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS5.6AI score0.00124EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/02/10 12:00 a.m.13 views

Security Updates for Microsoft Word Products (February 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple spoofing vulnerabilities: - Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network. CVE-2026-21511 - A spoofing...

7.5CVSS5.5AI score0.03635EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.17 views

PT-2026-7828

CVE-2026-25981 - Apache HTTP Server Deserialization CVE ID : CVE-2026-25981 Published : 2026年2月10日 05:16 | 1 小时,59 分钟 ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

5.5AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2026/02/10 12:00 a.m.174 views

📄 Oracle Access Manager 12.2.1.4.0 Insecure Deserialization

Proof of concept exploit for an unauthenticated Java deserialization vulnerability in the OpenSSO Agent component of Oracle Access Manager that allows remote attackers to execute arbitrary commands without authentication. The vulnerability exists in the session handling mechanism of the OpenSSO...

9.8CVSS6.1AI score0.96284EPSS
SaveExploits5
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.5 views

PT-2026-7397

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description The software contains a flaw related to data spoofing. This issue allows an unauthorized attacker to perform spoofing over a network through deserialization of untrusted data...

7.8CVSS5.4AI score0.03635EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/02/10 12:00 a.m.11 views

PT-2026-7411

Name of the Vulnerable Software and Affected Versions Azure AI Language Authoring SDK version 1.0.0 Description A flaw exists in the Azure AI Language Authoring SDK that allows an unauthorized attacker to execute code over a network. This is due to the deserialization of untrusted data. The issue...

10CVSS6.5AI score0.02344EPSS
SaveExploits0References12
Rows per page
Query Builder