7906 matches found
PT-2023-31371 · Unknown · Structured Content
Name of the Vulnerable Software and Affected Versions: Structured Content JSON-LD versions n/a through 1.5.3 Description: The issue is related to Deserialization of Untrusted Data, which affects the Structured Content JSON-LD plugin. No information is provided about the estimated number of...
OESA-2023-1914 jettison security update
Jettison is a collection of Java APIs like STaX and DOM which read and write JSON. This allows nearly transparent enablement of JSON based web services in services frameworks like CXF or XML serialization frameworks like XStream. Security Fixes: Those using Jettison to parse untrusted XML or JSON...
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
GHSA-97RV-88GF-PHVR Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
CVE-2023-46279
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
CVE-2023-46279 Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5. Users are recommended to upgrade to the latest version, which fixes the issue...
CVE-2023-46279
CVE-2023-46279 describes a Deserialization of Untrusted Data vulnerability in Apache Dubbo , affecting only version 3.1.5 . Multiple sources (NVD entry and Red Hat/CNVDOSV mirrors) confirm the issue stems from unsafe deserialization and leads to a high-impact compromise if exploited. The NVD metr...
PT-2023-29942 · Apache · Apache Dubbo
Name of the Vulnerable Software and Affected Versions: Apache Dubbo version 3.1.5 Description: The issue is related to the deserialization of untrusted data in Apache Dubbo. Users are advised to upgrade to the latest version to fix the issue. Recommendations: For Apache Dubbo version 3.1.5, upgra...
GHSA-5RV2-VVMF-F7W8 PHPEMS Deserialization of Untrusted Data vulnerability
A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...
PHPEMS Deserialization of Untrusted Data vulnerability
A vulnerability classified as critical was found in PHPEMS 6.x/7.0. Affected by this vulnerability is an unknown functionality in the library lib/session.cls.php of the component Session Data Handler. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has...
OpenSSL: Excessive time spent checking DH q parameter value
A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DHcheck, DHcheckex, or EVPPKEYparamcheck functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an...
Deserialization of untrusted data
An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could have been modified by authenticated users. Elastic would like to thank Yakov Shafranovich, with Amazon Web Services for reporting this issue...
Ajax Pro Cross-site Scripting
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary JavaScript objects. Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise...
GHSA-VWGG-2Q82-38C5 Solon is vulnerable to Deserialization of Untrusted Data
Ssolon = 2.6.0 and =2.5.12 is vulnerable to Deserialization of Untrusted Data...
apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
A flaw was found in apache-avro. When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints, leading to an out-of-memory error and a denial of service on the system...
apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
A flaw was found in apache-avro. When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints, leading to an out-of-memory error and a denial of service on the system...
apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
A flaw was found in apache-avro. When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints, leading to an out-of-memory error and a denial of service on the system...
apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
A flaw was found in apache-avro. When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints, leading to an out-of-memory error and a denial of service on the system...
