Lucene search
K

39 matches found

SUSE CVE
SUSE CVE
added 3 days ago9 views

SUSE CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS6.4AI score0.00086EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 3 days ago9 views

Linux Distros Unpatched Vulnerability : CVE-2026-10532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albe...

6.3CVSS6.4AI score0.00086EPSS
Exploits0References3
NVD
NVD
added 4 days ago11 views

CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS0.00086EPSS
Exploits0References1
OSV
OSV
added 4 days ago5 views

UBUNTU-CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS6.4AI score0.00086EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 4 days ago7 views

CVE-2026-10532 Logback deserialization whitelist bypass for Proxy objects

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS6.4AI score0.00086EPSS
Exploits0References1
Cvelist
Cvelist
added 4 days ago28 views

CVE-2026-10532 Logback deserialization whitelist bypass for Proxy objects

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS0.00086EPSS
Exploits0References1
CVE
CVE
added 4 days ago23 views

CVE-2026-10532

The CVE-2026-10532 issue concerns deserialization of untrusted data in QOS.CH Sarl logback-logback-core’s HardenedObjectInputStream module, allowing Object Injection when serialized data is directed at SimpleSocketServer or SimpleSSLSocketServer to instantiate Proxy objects. The vulnerability is ...

6.3CVSS6.4AI score0.00086EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-14496

Malware in sbrugna...

9.8CVSS9AI score0.01847EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.0 views

EUVD-2013-0767

Malware in sbrugna...

9.3CVSS9.3AI score0.01375EPSS
Exploits0References12
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-16806

Malware in sbrugna...

5.3CVSS7.4AI score0.00331EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 5:41 a.m.2 views

SUSE CVE-2013-0756

Use-after-free vulnerability in the objtoSource function in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted web page referencing...

9.3CVSS9.2AI score0.01375EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:46 a.m.2 views

SUSE CVE-2017-7831

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "exposedProps" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox 57...

5.3CVSS8.4AI score0.00331EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.16 views

Mozilla Firefox Security Advisory (MFSA2013-19) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

9.3CVSS6.4AI score0.01375EPSS
Exploits0References3
NVD
NVD
added 2020/07/20 5:15 p.m.12 views

CVE-2020-15053

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

6.1CVSS6.1AI score0.11797EPSS
Exploits1References1
OSV
OSV
added 2020/07/20 5:15 p.m.2 views

CVE-2020-15053

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

6.1CVSS6.4AI score0.11797EPSS
Exploits1References1
Prion
Prion
added 2020/07/20 5:15 p.m.14 views

Cross site scripting

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

4.3CVSS6AI score0.11797EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/07/20 5:15 p.m.2 views

CVE-2020-15053

An issue was discovered in Artica Proxy CE before 4.28.030.418. Reflected XSS exists via these search fields: real time request, System Events, Proxy Events, Proxy Objects, and Firewall objects...

6.1CVSS6.2AI score0.11797EPSS
Exploits1References2
0day.today
0day.today
added 2018/12/29 12:0 a.m.66 views

WebKit JSC JSArray::shiftCountWithArrayStorage Out-Of-Band Read / Write Exploit

WebKit: JSC: A bug in JSArray::shiftCountWithArrayStorage CVE-2018-4441 bool JSArray::shiftCountWithArrayStorageVM& vm, unsigned startIndex, unsigned count, ArrayStorage storage unsigned oldLength = storage-length; RELEASEASSERTcount hasHoles && this-structurevm-holesMustForwardToPrototypevm, thi...

8.8CVSS0.3AI score0.45973EPSS
Exploits7
Exploit DB
Exploit DB
added 2018/12/13 12:0 a.m.35 views

WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains

didBecomePrototype; if structurevm-hasMonoProto DeferredStructureTransitionWatchpointFire deferredvm, structurevm; Structure newStructure = Structure::changePrototypeTransitionvm, structurevm, prototype, deferred; setStructurevm, newStructure; else putDirectvm, knownPolyProtoOffset, prototype; if...

7.4AI score
Exploits0
OSV
OSV
added 2018/06/11 9:29 p.m.2 views

CVE-2017-7831

A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "exposedProps" mechanism on proxy objects. These properties should be explicitly unavailable to proxy objects. This vulnerability affects Firefox 57...

5.3CVSS7.3AI score
Exploits0References4
Rows per page
Query Builder