CVE-2024-6327

In Progress® Telerik® Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-6327

In Progress® Telerik® Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-6327 Progress Telerik Report Server Deserialization

In Progress® Telerik® Report Server versions prior to 2024 Q2 10.1.24.709, a remote code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-6327

CVE-2024-6327 affects Progress Telerik Report Server prior to 2024 Q2 (10.1.24.709). The issue is an insecure deserialization vulnerability that enables remote code execution over the network (no user interaction). AFFECTED: Progress Telerik Report Server versions before 10.1.24.709. IMPACT: remo...

Progress Software Telerik Report Server 安全漏洞

Progress Software Telerik Report Server is an enterprise-class report management and distribution solution from Progress Software, USA. A security vulnerability exists in Progress Software Telerik Report Server versions prior to 10.1.24.709 that originates from a possible remote code execution...

PT-2024-5211 · Telerik · Telerik Report Server

Name of the Vulnerable Software and Affected Versions: In Progress Telerik Report Server versions prior to 2024 Q2 10.1.24.709 Description: The issue is related to an insecure deserialization vulnerability in the Telerik Report Server, which can be exploited to allow a remote attacker to execute...

PT-2024-5159 · Ivanti · Ivanti Endpoint Manager Mobile

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Mobile EPMM versions prior to 12.1.0.1 Description: The issue is related to an insecure deserialization vulnerability in the web component of EPMM. This vulnerability allows an authenticated remote attacker to execute...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from an insecure deserialization of the multiple method of the ZygoteProcess.java file, which could potentially enable code execution ...

Insecure Deserialization

TYPO3 is vulnerable to Insecure Deserialization. The vulnerability is due to failing to properly validate incoming data in the suggest wizard, which allows an attacker to exploit insecure unserialize operations. A valid backend user account is required to exploit this vulnerability...

Insecure Deserialization

typo3/cms is vulnerable to Insecure Deserialization. The vulnerability is due to improper validation of incoming import data in the Import/Export component, which requires a valid backend user account to exploit...

CVE-2024-38622

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: Add callback function pointer check before its call In dpucoreirqcallbackhandler callback function pointer is compared to NULL, but then callback function is unconditionally called by this pointer. Fix this bug by...

Insecure Deserialization

typo3/cms is vulnerable to Insecure Deserialization. The vulnerability is due to the execution of source code from Phar files when they are invoked. Due to missing sanitization of user input, attackers can upload obfuscated Phar files "bundle.txt" and manipulate URLs in TYPO3 backend forms to...

Insecure Deserialization

nukeviet/nukeviet vulnerable to a Insecure Deserialization. The vulnerability is due to improper handling of serialized data, allowing attackers to execute arbitrary code via download.php...

CVE-2024-5671

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager...

CVE-2024-5671

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager...

CVE-2024-5671

CVE-2024-5671: Insecure Deserialization in some workflows of Trellix IPS Manager enables unauthenticated remote arbitrary code execution and access. Reported across multiple sources; CVSSv3.1 indicates network access, no authentication, low attack complexity, with total impact on confidentiality,...

CVE-2024-5671

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager...

Insecure Deserialization

typo3/cms is vulnerable to Insecure Deserialization. The vulnerability is due to improper handling of user-submitted payloads that are signed with an HMAC-SHA1 using the sensitive TYPO3 encryptionKey as the secret. If the encryptionKey is known to attackers, they can craft a malicious payload tha...

PT-2024-37021 · Trellix · Trellix Ips Manager

Name of the Vulnerable Software and Affected Versions: Trellix IPS Manager affected versions not specified Description: The issue is related to Insecure Deserialization in some workflows of the IPS Manager, allowing unauthenticated remote attackers to perform arbitrary code execution and access t...

Trellix IPS Manager Code Issue Vulnerability

Trellix IPS Manager is a next-generation IPS for local and virtual networks from FireEye Trellix USA. Trellix IPS Manager suffers from a code issue vulnerability that stems from insecure deserialization. An attacker exploiting this vulnerability could execute arbitrary code...