4396 matches found
PT-2022-27248 · Huawei · Emui +1
Name of the Vulnerable Software and Affected Versions: System framework layer affected versions not specified Description: The issue is related to a serialization/deserialization mismatch in the system framework layer. This could potentially lead to privilege escalation if successfully exploited...
CVE-2022-44562
The system framework layer has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation...
PT-2022-27243 · Unknown · Ams Module
Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a serialization/deserialization mismatch in the AMS module. This could potentially lead to privilege escalation if successfully exploited. Recommendations: At the...
PT-2022-27244 · Unknown · Ams Module
Name of the Vulnerable Software and Affected Versions: AMS module affected versions not specified Description: The issue is related to a serialization/deserialization mismatch in the AMS module. This could potentially lead to privilege escalation if successfully exploited. Recommendations: At the...
CVE-2022-44562
CVE-2022-44562 involves a serialization/deserialization mismatch in the system framework layer of Huawei HarmonyOS. Affected component: the system framework layer; root cause: incorrect handling of serialized data leading to privilege escalation. Impact: high, including confidentiality, integrity...
CVE-2022-44559
CVE-2022-44559 affects Huawei/HarmonyOS AMS module, describing a serialization/deserialization mismatch that can lead to privilege escalation. The vulnerability is documented with CRITICAL impact (CVSS 3.1, base score 9.8) and a NETWORK attack vector with no user interaction required. Connected s...
CVE-2022-44558
CVE-2022-44558 concerns the AMS module in Huawei HarmonyOS, with a serialization/deserialization mismatch leading to privilege escalation. The CVSSv3.1 base score is 9.8 (CRITICAL), indicating high impact across network attack vector with low complexity and no user interaction. Connected sources ...
ALSA-2022:7464 Moderate: protobuf security update
The protobuf packages provide Protocol Buffers, Google's data interchange format. Protocol Buffers can encode structured data in an efficient yet extensible format, and provide a flexible, efficient, and automated mechanism for serializing structured data. Security Fixes: protobuf: Incorrect...
Huawei HarmonyOS AMS Module Elevation of Privilege Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an elevation of privilege vulnerability, which stems from a serialization and deserialization mismatch in the AMS module. An...
Huawei HarmonyOS 代码问题漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an elevation of privilege vulnerability, which stems from a serialization and deserialization mismatch in the AMS module. An...
Huawei HarmonyOS 代码问题漏洞
Huawei HarmonyOS is an operating system from Huawei China. Huawei HarmonyOS is vulnerable to an elevation of privilege vulnerability caused by a serialization/deserialization mismatch in the AMS module. An attacker could exploit this vulnerability to elevate privileges...
Huawei HarmonyOS 安全漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a serialization and deserialization mismatch in the system framework layer. An attacke...
Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2022-2616)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2022-2616)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected...
PT-2022-26026 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master versions 00.00.01a and prior Description: The issue concerns a lack of proper authentication for functions that create and modify user groups. An attacker could exploit this by providing malicious...
KeySight N6854A and N6841A RF Sensor Insecure Deserialization (CVE-2022-1660)
An insecure deserialization vulnerability exists in KeySight N6854A and N6841A RF Sensor. This vulnerability is due to Java serialization issues when processing requests...
Hyperledger: CVE-2017-5929: Hyperledger - Arbitrary Deserialization of Untrusted Data
Vulnerability Overview Serialization is a process of converting an object into a sequence of bytes which can be persisted to a disk or database or can be sent through streams. The reverse process of creating object from sequence of bytes is called deserialization. Serialization is commonly used f...
CVE-2022-3291
Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can leak sensitive information via cache...
Information disclosure
Serialization of sensitive data in GitLab EE affecting all versions from 14.9 prior to 15.2.5, 15.3 prior to 15.3.4, and 15.4 prior to 15.4.1 can leak sensitive information via cache...
