1827 matches found
CVE-2024-11839
CVE-2024-11839 affects PlexTrac, specifically the Runbooks modules, where deserialization of untrusted data enables object injection and arbitrary file writes. Affected versions are PlexTrac 1.61.3 through before 2.8.1. The issue is a server-side deserialization flaw with network exposure and no ...
CVE-2024-11839 Insecure Deserialization via Runbooks Imports
Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...
UBUNTU-CVE-2024-55637
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...
GeoServer < 2.19.6 Insecure Deserialization
According to its banner, the version of GeoServer running on the remote host is prior to 2.19.6 or 2.20.0 2.20.4. It is, therefore, affected by an Insecure Deserialization Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
GeoServer 2.20.0 < 2.20.4 Insecure Deserialization
According to its banner, the version of GeoServer running on the remote host is prior to 2.19.6 or 2.20.0 2.20.4. It is, therefore, affected by an Insecure Deserialization Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...
CVE-2024-55638 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...
CVE-2024-55636 Drupal core - Less critical - Gadget chain - SA-CORE-2024-006
Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...
CVE-2024-42455
A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The...
CVE-2024-42455
CVE-2024-42455 affects Veeam Backup & Replication. The flaw enables a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection, allowing deletion of any file on the system with the service account privileges. Root c...
CVE-2024-51363
Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...
PT-2024-34607 · Hodoku · Hodoku
Name of the Vulnerable Software and Affected Versions: Hodoku versions 2.3.0 through 2.3.2 Description: Insecure deserialization in Hodoku allows attackers to execute arbitrary code. Recommendations: For versions 2.3.0 through 2.3.2, update to a version that fixes the insecure deserialization...
HoDoKu 安全漏洞
HoDoKu is HoDoKu open source a Sudoku generator/solver/analyzer written in Java. A security vulnerability exists in HoDoKu versions v2.3.0 through v2.3.2, which stems from the presence of insecure deserialization that allows an attacker to execute arbitrary code...
CVE-2024-51363
Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...
CVE-2024-51363
Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...
CVE-2024-51363
Hodoku (open-source Java) versions 2.3.0–2.3.2 are affected by insecure deserialization that allows remote arbitrary code execution. The issue stems from deserializing untrusted data, enabling an attacker to run code on the affected system. Reported uniformly across multiple sources (Red Hat, NVD...
PT-2024-9307 · Drupal · Drupal Core
Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Drupal Core versions 11.0.0 through 11.0.7 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This c...
PT-2024-9323 · Drupal +1 · Drupal Core +1
Name of the Vulnerable Software and Affected Versions: Drupal Core versions 7.0 through 7.101 Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can...
PT-2025-25272 · Trend Micro · Trend Micro Apex Central
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation, which could lead to a pre-authentication remote code execution on affected installations. This vulnerability is...