CVE-2024-12687 Insecure YAML Deserialization

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-10095

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-10095 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213, a code execution attack is possible through an insecure deserialization vulnerability...

PT-2024-16023 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI User Interface controls for application development from Progress, Inc. A code issue vulnerability exists in Progress Telerik UI versions prior to 2024.4.1213, which stems from the presence of an insecure deserialization vulnerability that could allow code...

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

CVE-2024-11839

CVE-2024-11839 affects PlexTrac, specifically the Runbooks modules, where deserialization of untrusted data enables object injection and arbitrary file writes. Affected versions are PlexTrac 1.61.3 through before 2.8.1. The issue is a server-side deserialization flaw with network exposure and no ...

CVE-2024-11839 Insecure Deserialization via Runbooks Imports

Deserialization of Untrusted Data vulnerability in PlexTrac Runbooks modules which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1...

UBUNTU-CVE-2024-55637

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

GeoServer < 2.19.6 Insecure Deserialization

According to its banner, the version of GeoServer running on the remote host is prior to 2.19.6 or 2.20.0 2.20.4. It is, therefore, affected by an Insecure Deserialization Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

GeoServer 2.20.0 < 2.20.4 Insecure Deserialization

According to its banner, the version of GeoServer running on the remote host is prior to 2.19.6 or 2.20.0 2.20.4. It is, therefore, affected by an Insecure Deserialization Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2024-55638 Drupal core - Moderately critical - Gadget chain - SA-CORE-2024-008

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 7.0 before 7.102, from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-55636 Drupal core - Less critical - Gadget chain - SA-CORE-2024-006

Deserialization of Untrusted Data vulnerability in Drupal Core allows Object Injection.This issue affects Drupal Core: from 8.0.0 before 10.2.11, from 10.3.0 before 10.3.9, from 11.0.0 before 11.0.8. Drupal core contains a chain of methods that is exploitable when an insecure deserialization...

CVE-2024-42455

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The...

CVE-2024-42455

CVE-2024-42455 affects Veeam Backup & Replication. The flaw enables a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection, allowing deletion of any file on the system with the service account privileges. Root c...

CVE-2024-51363

Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...

HoDoKu 安全漏洞

HoDoKu is HoDoKu open source a Sudoku generator/solver/analyzer written in Java. A security vulnerability exists in HoDoKu versions v2.3.0 through v2.3.2, which stems from the presence of insecure deserialization that allows an attacker to execute arbitrary code...

PT-2024-34607 · Hodoku · Hodoku

Name of the Vulnerable Software and Affected Versions: Hodoku versions 2.3.0 through 2.3.2 Description: Insecure deserialization in Hodoku allows attackers to execute arbitrary code. Recommendations: For versions 2.3.0 through 2.3.2, update to a version that fixes the insecure deserialization...