Lucene search
+L

7896 matches found

Positive Technologies
Positive Technologies
added 2024/10/30 12:00 a.m.13 views

PT-2024-34283 · Unknown · Ds.Downloadlist

Name of the Vulnerable Software and Affected Versions: DS.DownloadList versions 1.3 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches by injecting malicious objects into the system...

9.8CVSS7AI score0.01045EPSS
SaveExploits0References5
Snyk
Snyk
added 2024/10/29 9:41 p.m.7 views

Deserialization of Untrusted Data

Overview chainer is an A flexible framework of neural networks Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the chainermn module, in the communication utility component. Details Serialization is a process of converting an object into a sequence of byte...

9.8CVSS6.9AI score0.00834EPSS
SaveExploits0References2
NVD
NVD
added 2024/10/29 9:15 p.m.16 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

9.8CVSS0.00834EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.7 views

PT-2024-33025 · Chainer · Chainer

Name of the Vulnerable Software and Affected Versions: chainer version 7.8.1.post1 Description: A Deserialization of Untrusted Data issue allows for the execution of arbitrary code. Recommendations: For version 7.8.1.post1, update to a version that fixes the Deserialization of Untrusted Data issu...

9.8CVSS7.9AI score0.00834EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/29 12:00 a.m.11 views

Chainer 安全漏洞

Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...

9.8CVSS7.8AI score0.00834EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/29 12:00 a.m.9 views

PT-2024-16150

Name of the Vulnerable Software and Affected Versions Keycloak-services affected versions not specified Red Hat products affected versions not specified Description A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lea...

7.1CVSS4.4AI score0.01255EPSS
SaveExploits0References42
OSV
OSV
added 2024/10/28 12:15 p.m.8 views

CVE-2024-50408

Deserialization of Untrusted Data vulnerability in Kiboko Labs Namaste! LMS allows Object Injection.This issue affects Namaste! LMS: from n/a through 2.6.3...

8.8CVSS5.8AI score0.00504EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/28 12:15 p.m.11 views

CVE-2024-50416

Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through 1.2.6...

8.8CVSS5.8AI score0.00504EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/28 11:30 a.m.16 views

CVE-2024-50416 WordPress WPC Shop as a Customer for WooCommerce plugin <= 1.2.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in WPClever WPC Shop as a Customer for WooCommerce wpc-shop-as-customer allows Object Injection.This issue affects WPC Shop as a Customer for WooCommerce: from n/a through = 1.2.6...

8.8CVSS5.9AI score0.00504EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.10 views

PT-2024-34181 · Unknown · Namaste! Lms

Name of the Vulnerable Software and Affected Versions: Namaste! LMS versions n/a through 2.6.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches by injecting malicious objects into the system...

8.8CVSS6.6AI score0.00504EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/10/28 12:00 a.m.11 views

PT-2024-34190 · Woocommerce · Wpc Shop As A Customer For Woocommerce

Name of the Vulnerable Software and Affected Versions: WPC Shop as a Customer for WooCommerce versions 1.2.6 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially be exploited, although specific details about the...

8.8CVSS6.6AI score0.00504EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/23 3:13 p.m.47 views

CVE-2024-49684 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS0.00531EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/23 3:13 p.m.69 views

CVE-2024-49684

CVE-2024-49684 refers to a Deserialization of Untrusted Data vulnerability in the WordPress plugin “Backup and Staging by WP Time Capsule” (versions

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/23 3:13 p.m.21 views

CVE-2024-49684 WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in revmakx Backup and Staging by WP Time Capsule wp-time-capsule allows Object Injection.This issue affects Backup and Staging by WP Time Capsule: from n/a through = 1.22.21...

7.2CVSS5.9AI score0.00531EPSS
SaveExploits0References1
Snyk
Snyk
added 2024/10/23 2:41 p.m.16 views

Deserialization of Untrusted Data

Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the use of pickle as a serialization format for socket communication. An attacker can execute arbitrary code by sending maliciously crafted data that is deserialized...

9.8CVSS7.8AI score0.00873EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.17 views

PT-2024-33637 · Wp Time Capsule · Backup/Staging By Wp Time Capsule

Name of the Vulnerable Software and Affected Versions: Backup and Staging by WP Time Capsule versions 1.22.21 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions 1.22.21 and earlier, update to a version...

7.2CVSS6.8AI score0.00531EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.16 views

PT-2025-2103 · Drupal · Drupal Monster Menus

Name of the Vulnerable Software and Affected Versions: Drupal Monster Menus versions 0.0.0 through 9.3.3 Drupal Monster Menus versions 9.4.0 through 9.4.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remot...

5CVSS8.3AI score0.00346EPSS
SaveExploits0References4
NVD
NVD
added 2024/10/20 9:15 a.m.19 views

CVE-2024-49625

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

9.8CVSS0.00524EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 9:15 a.m.14 views

CVE-2024-49332

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/20 8:15 a.m.20 views

CVE-2024-49626

Deserialization of Untrusted Data vulnerability in Piyushmca Shipyaari Shipping Management allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through 1.2...

9.8CVSS5.8AI score0.00524EPSS
SaveExploits0References1
Rows per page
Query Builder