2 matches found
CVE-2026-25925: Deserialization of Untrusted Data
PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a critical security vulnerability in how it parses JSON files within Flow or App packages. The application blindly trusts the $type property in JSON files, allowing an attacker to...
7.8CVSS6.3AI score0.00341EPSS
SaveExploits1References1
CVE-2024-10456: Deserialization of Untrusted Data
Delta Electronics InfraSuite Device Master versions prior to 1.0.12 are affected by a deserialization vulnerability that targets the Device-Gateway, which could allow deserialization of arbitrary .NET objects prior to authentication...
9.8CVSS8.5AI score0.17589EPSS
SaveExploits0References1
20