PyArrow Code Execution

The vulnerability of the PyArrow library is related to the reading of data from unreliable sources. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

SolarWinds Access Rights Manager Code Execution

The vulnerability of the SolarWinds Access Rights Manager access control software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Inductive Automation Ignition Code Execution

The vulnerability of the AbstractGatewayFunction class in Inductive Automation Ignition software relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the SYSTEM context...

Orchid Platform Code Execution

The vulnerability of the Orchid Platform relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Plex Media Server Code Execution

The vulnerability of the cross-platform media server Plex Media Server lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fortra GoAnywhere MFT Code Execution

The vulnerability of the Fortra HelpSystems GoAnywhere MFT application for secure file transfer is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Core Telephony framework Bypass

The vulnerability of the Core Telephony framework in operating systems such as Mac OS, iOS, iPadOS, and watchOS relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

Red Database Search Injection

The vulnerability of the RedBase database management system is related to the improper neutralization of equivalent special elements. Exploiting this vulnerability allows an attacker to provide unreliable data during a search using Distinguished Names, by employing special symbols...

Apache Flume Memory Recovery Code Execution

The vulnerability of the Apache Flume software for transmitting large volumes of streaming data is related to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rockwell Automation Code Execution

The vulnerabilities of the software for designing and configuring controllers in the Connected Components Workbench, the workstations for automated safety systems called Safety Instrumented Systems Workstations, and the application development environment for programmable logic controllers in the...

SolarWinds Patch Manager Chart Component Code Execution

The vulnerability of the Chart component in the SolarWinds Patch Manager software involves the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Advisory ROSA-SA-2021-1909

Software: log4j 1.2.17 OS: Cobalt 7.9 CVE-ID: CVE-2019-17571 CVE-Crit: CRITICAL CVE-DESC: Log4j 1.2 includes a SocketServer class vulnerable to unreliable data deserialization, which can be used to remotely execute arbitrary code in conjunction with a deserialization gadget while listening to...

Log4j Java Logging Code Execution

The vulnerability of the Log4j logging library in Java programs relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Jackson-databind Unreliable Data Restoration

The vulnerability of the Jackson-databind library in the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

PHP framework Yii Code Execution

The vulnerability of the PHP framework Yii is related to the restoration of unreliable data structures in memory. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Jackson-databind Unreliable Data Access DoS

The vulnerability of the Jackson-databind library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

Jackson-Databind JSON Parsing Unauthenticated Access

The vulnerability of the FasterXML function in the Jackson-Databind Java library for JSON file grammar analysis involves memory restoration of an unreliable data structure. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CA Release Automation Code Execution

The vulnerability of the CA Release Automation system arises from the restoration of a dubious data structure in memory. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using a specially crafted serialized object...