Lucene search
+L

7896 matches found

Vulnrichment
Vulnrichment
added 2024/10/20 8:10 a.m.15 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Giveaway Boost allows Object Injection.This issue affects Giveaway Boost: from n/a through 2.1.4...

9.8CVSS9.5AI score0.00524EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/20 8:10 a.m.33 views

CVE-2024-49332 WordPress Giveaway Boost plugin <= 2.1.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in giveawayboost Giveaway Boost giveaway-boost allows Object Injection.This issue affects Giveaway Boost: from n/a through = 2.1.4...

9.8CVSS0.00524EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/20 8:07 a.m.23 views

CVE-2024-49625 WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

9.8CVSS5.2AI score0.00524EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/20 8:07 a.m.36 views

CVE-2024-49625 WordPress SiteBuilder Dynamic Components plugin <= 1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in sphoid SiteBuilder Dynamic Components sitebuilder-dynamic-components allows Object Injection.This issue affects SiteBuilder Dynamic Components: from n/a through = 1.0...

9.8CVSS0.00524EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/20 8:03 a.m.40 views

CVE-2024-49626 WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

9.8CVSS0.00524EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/20 8:03 a.m.95 views

CVE-2024-49626

CVE-2024-49626 : Shipyaari Shipping Management plugin (WordPress)

9.8CVSS5.9AI score0.00524EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/20 8:03 a.m.16 views

CVE-2024-49626 WordPress Shipyaari Shipping Management plugin <= 1.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Piyush Patel Shipyaari Shipping Management shipyaari-shipping-managment allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through = 1.2...

9.8CVSS5.2AI score0.00524EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.18 views

PT-2024-33579 · Smartdevth · Smartdevth Advanced Advertising System

Name of the Vulnerable Software and Affected Versions: Smartdevth Advanced Advertising System versions 1.3.1 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in the Smartdevth Advanced Advertising System. Recommendations: For versio...

9.8CVSS7.1AI score0.00554EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.18 views

PT-2024-33581 · Unknown · Piyushmca Shipyaari Shipping Management

Name of the Vulnerable Software and Affected Versions: Piyushmca Shipyaari Shipping Management versions 1.2 and earlier Description: The Deserialization of Untrusted Data issue in Piyushmca Shipyaari Shipping Management allows Object Injection. This permits an attacker to inject malicious objects...

9.8CVSS6.9AI score0.00524EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.12 views

PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components

Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...

9.8CVSS7.5AI score0.00524EPSS
SaveExploits0References8
NVD
NVD
added 2024/10/17 9:15 p.m.23 views

CVE-2024-48924

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/17 8:36 p.m.23 views

CVE-2024-48924 MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS6.6AI score
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/17 8:36 p.m.42 views

CVE-2024-48924 MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS0.00371EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/10/17 8:36 p.m.20 views

CVE-2024-48924 MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS7.1AI score0.00371EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/17 7:30 p.m.26 views

GHSA-4QM4-8HG2-G2XM MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS6.6AI score0.00371EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/10/17 7:30 p.m.30 views

MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to large CPU consumption disproportionate to the size of the data being deserialize...

8.7CVSS6.7AI score0.00371EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2024/10/17 5:11 p.m.59 views

CVE-2024-49318

CVE-2024-49318 affects the WordPress My Reading Library plugin (versions

9.8CVSS5.9AI score0.00523EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/17 5:11 p.m.40 views

CVE-2024-49318 WordPress My Reading Library plugin <= 1.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Scott My Reading Library my-reading-library allows Object Injection.This issue affects My Reading Library: from n/a through = 1.0...

9.8CVSS0.00523EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/17 12:00 a.m.7 views

WordPress plugin My Reading Library 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.8CVSS7.1AI score0.00523EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/17 12:00 a.m.14 views

PT-2024-33272 · Unknown · Messagepack-Csharp

Name of the Vulnerable Software and Affected Versions: MessagePack-CSharp versions prior to 2.5.187 and 3.0.214 Description: The vulnerability occurs when the library is used to deserialize messagepack data from an untrusted source, leading to a risk of a denial of service attack by an attacker...

8.7CVSS6.8AI score0.00371EPSS
SaveExploits0References12
Rows per page
Query Builder