1826 matches found
Remote Code Execution (RCE)
bentoML is vulnerable to an Remote Code Execution RCE. The vulnerability is due to missing media type checks when handling serialized objects, resulting remote code execution through crafted POST requests containing pickled objects...
Insecure deserialization in BentoML
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...
GHSA-HVJ5-MVW9-93J3 Insecure deserialization in BentoML
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...
CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...
CVE-2024-2912 Insecure Deserialization Leading to RCE in bentoml/bentoml
An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability, attackers can execute arbitrary commands on the server hosting the BentoML application. The vulnerability is...
CVE-2024-2912
CVE-2024-2912 (BentoML) has documented insecure deserialization leading to remote code execution (RCE). The vulnerability arises when a serialized object is crafted to execute OS commands during deserialization and sent to BentoML endpoints via POST requests, allowing attackers to run arbitrary c...
PT-2024-22740
Name of the Vulnerable Software and Affected Versions BentoML affected versions not specified Description An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability,...
BentoML 安全漏洞
BentoML is an open source modeling service library from BentoML Open Source. for building high-performance and scalable AI applications using Python. A security vulnerability exists in BentoML that stems from the presence of an insecure deserialization vulnerability that allows Remote Code...
PT-2024-22908 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 and 3 Description: An insecure deserialization vulnerability has been identified, allowing attackers to execute arbitrary code and obtain sensitive information via crafted input to the Data Serialization and...
CVE-2024-30719
CVE-2024-30719 is rejected; this candidate is not used and does not reflect an active vulnerability entry.
CVE-2024-30736
CVE-2024-30736 entry is rejected/not used; withdrawn by CNA with no vulnerability evidence.
HPESBGN04598 rev.1 - HPE Unified Correlation Analyzer (UCA), Multiple Vulnerabilities
Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Unauthorized Access, memory corruption, XML External Entity XXE, Insecure Deserialization SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Unified Correlation Analyzer UCA - Prior to v4.4.0 CVSS Scores: |...
PT-2024-23594 · Unknown · Ros2 Dashing Diademata
Name of the Vulnerable Software and Affected Versions: ROS2 Dashing Diademata versions 2 Description: An insecure deserialization issue allows attackers to execute arbitrary code. Recommendations: For ROS2 Dashing Diademata version 2, at the moment, there is no information about a newer version...
CVE-2024-30687
CVE-2024-30687 has been withdrawn; multiple sources (NVD, CNNVD, CVE List) state: “DO NOT USE THIS CANDIDATE NUMBER. This candidate was withdrawn by its CNA. Further investigation showed that there was not reasonable evidence to determine the existence of a vulnerability.” Consequently, there is ...
PT-2024-23582 · Unknown · Ros2 Galactic Geochelone
Name of the Vulnerable Software and Affected Versions: ROS2 Galactic Geochelone versions 2 Description: An insecure deserialization vulnerability has been identified, allowing attackers to execute arbitrary code and obtain sensitive information via crafted input to the Data Serialization and...
Insecure Deserialization
WordPress is vulnerable to Insecure Deserialization. The vulnerability is due to deserialization of untrusted data containing the instances of the WPHTMLToken class. This can lead to remote code execution via the destruct magic method of the class...
PT-2024-23568 · Ros2 · Ros2
Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions ROS VERSION 2 and ROS PYTHON VERSION 3 Description: An insecure deserialization issue allows attackers to execute arbitrary code via a crafted input to the Data Serialization and Deserialization Components,...
PT-2024-23554 · Unknown · Ros Melodic Morenia
Name of the Vulnerable Software and Affected Versions: ROS Robot Operating System Melodic Morenia versions 1 Description: The issue concerns an insecure deserialization vulnerability, which allows attackers to execute arbitrary code or obtain sensitive information via crafted input to the data...
