Lucene search
+L

788 matches found

CNNVD
CNNVD
added 2021/08/12 12:0 a.m.7 views

Apache OFBiz 代码问题漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a suite of Java-based Web application components and tools. Apache OFBiz has a security vulnerability that stems from having insecure deserialization mitigation...

9.8CVSS8.3AI score0.0603EPSS
SaveExploits0References19
GithubExploit
GithubExploit
added 2021/08/04 6:48 a.m.292 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2020-9496 Because the 2 xmlrpc related requets in webtools...

6.1CVSS7AI score0.98926EPSS
SaveExploits16
Check Point Advisories
Check Point Advisories
added 2021/06/20 12:0 a.m.42 views

Apache OFBiz Insecure Deserialization (CVE-2021-29200)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

7.5CVSS3.9AI score0.5537EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2021/06/06 10:32 a.m.137 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2020-9496 XML-RPC request are vulnerable to unsafe deseria...

6.1CVSS6.5AI score0.98926EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2021/05/13 1:28 p.m.130 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

ofbiz-poc CVE-2020-9496 and CVE20209496 utilize dnslog for...

9.8CVSS7.1AI score0.98926EPSS
SaveExploits23
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.16 views

The vulnerability of the Apache OFBiz resource planning software lies in its ability to restore unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Apache OFBiz’s resource planning software lies in its ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

9CVSS8.2AI score0.81079EPSS
SaveExploits2References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.13 views

The vulnerability of the Apache OFBiz resource planning software lies in its ability to restore unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Apache OFBiz’s resource planning software lies in its ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...

9CVSS8.5AI score0.5537EPSS
SaveExploits0References10Affected Software1
Check Point Advisories
Check Point Advisories
added 2021/05/12 12:0 a.m.10 views

Apache OFBiz Insecure Deserialization (CVE-2021-26295)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

7.5CVSS3.9AI score0.97822EPSS
SaveExploits9
GithubExploit
GithubExploit
added 2021/05/07 4:50 p.m.161 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in we...

6.1CVSS7.6AI score0.98926EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2021/04/30 6:55 a.m.688 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in we...

6.1CVSS7.5AI score0.98926EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2021/04/29 5:59 p.m.122 views

Exploit for Deserialization of Untrusted Data in Apache Ofbiz

CVE-2021-30128 Apache...

10CVSS7.3AI score0.81079EPSS
SaveExploits2
CNVD
CNVD
added 2021/04/29 12:0 a.m.29 views

Apache OFBiz Code Issue Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A code issue vulnerability exists in Apache OFBiz versions prior to 17.12.07 that stems from insecure...

10CVSS7AI score0.81079EPSS
SaveExploits2References1
Check Point Advisories
Check Point Advisories
added 2021/04/28 12:0 a.m.17 views

Apache OFBiz Insecure Deserialization(CVE-2021-26295)

An insecure deserialization vulnerability exists in Apache OFBiz. This vulnerability is due to Java serialization issues when processing requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request...

7.5CVSS3.9AI score0.97822EPSS
SaveExploits9
seebug.org
seebug.org
added 2021/04/28 12:0 a.m.66 views

Apache OFBiz 代码执行漏洞(CVE-2021-30128)

...

10CVSS1.3AI score0.81079EPSS
SaveExploits2
CNVD
CNVD
added 2021/04/28 12:0 a.m.15 views

Apache OFBiz Remote Code Execution Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. Apache OFBiz versions prior to 17.12.07 remote code execution vulnerability , the vulnerability stems from...

9.8CVSS7.7AI score0.5537EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/27 8:15 p.m.47 views

CVE-2021-30128

Apache OFBiz has unsafe deserialization prior to 17.12.07 version...

10CVSS0.81079EPSS
SaveExploits2References10
OSV
OSV
added 2021/04/27 8:15 p.m.26 views

CVE-2021-29200

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...

9.8CVSS6.9AI score
SaveExploits0References7
NVD
NVD
added 2021/04/27 8:15 p.m.28 views

CVE-2021-29200

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...

9.8CVSS0.5537EPSS
SaveExploits0References7
OSV
OSV
added 2021/04/27 8:15 p.m.27 views

CVE-2021-30128

Apache OFBiz has unsafe deserialization prior to 17.12.07 version...

9.8CVSS6.7AI score
SaveExploits0References10
Prion
Prion
added 2021/04/27 8:15 p.m.29 views

Deserialization of untrusted data

Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...

7.5CVSS9.4AI score0.5537EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder