1815 matches found
CVE-2021-35215 ActionPluginBaseView Deserialization of Untrusted Data RCE
Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability...
CVE-2021-35215
CVE-2021-35215 affects SolarWinds Orion Platform (notably the 2020.2.5 release). The issue is insecure deserialization in the ActionPluginBaseView that can lead to Remote Code Execution when authenticated. Public sources in the connected documents identify the affected component and root cause an...
Solarwinds Orion Platform 代码问题漏洞
Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
Solarwinds Orion Platform 代码问题漏洞
Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...
CVE-2021-36981
In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code...
SerNet verinice 代码问题漏洞
SerNet verinice is a Java application from SerNet Germany. A tool for managing information security. SerNet verinice suffers from a code issue vulnerability that stems from insecure Java deserialization in SerNet verinice servers prior to version 1.22.2 that allows an authenticated, remote attack...
Apache OFBiz 代码问题漏洞
Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a suite of Java-based Web application components and tools. Apache OFBiz has a security vulnerability that stems from having insecure deserialization mitigation...
JetBrains TeamCity Insecure Deserialization Vulnerability
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An insecure deserialization vulnerabilit...
CVE-2021-37544
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...
CVE-2021-37544
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...
CVE-2021-37544
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...
CVE-2021-37544
In JetBrains TeamCity before 2020.2.4, there was an insecure deserialization...
CVE-2021-37544
CVE-2021-37544 affects JetBrains TeamCity prior to version 2020.2.4, where an insecure deserialization vulnerability exists in the TeamCity component. The CVSS3.1 base score is 9.8 (CRITICAL), with network access, no authentication required, and impacts on confidentiality, integrity, and availabi...
Jetbrains JetBrains TeamCity 代码问题漏洞
JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains Jetbrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An insecure deserialization vulnerabilit...
JetBrains Security Bulletin Q2 2021
JetBrains News Security JetBrains Security Bulletin Q2 2021 Robert Demmer In the second quarter of 2021, we resolved a number of security issues in our products. Here’s a summary report that contains a description of each issue and the version in which it was resolved. Product | Description |...
CVE-2021-36483
DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...
CVE-2021-36483
DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...
CVE-2021-36483
DevExpress.XtraReports.UI through v21.1 allows attackers to execute arbitrary code via insecure deserialization...
