550 matches found
Chainer Remote Code Execution Vulnerability
Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...
PT-2024-33025 · Chainer · Chainer
Name of the Vulnerable Software and Affected Versions: chainer version 7.8.1.post1 Description: A Deserialization of Untrusted Data issue allows for the execution of arbitrary code. Recommendations: For version 7.8.1.post1, update to a version that fixes the Deserialization of Untrusted Data issu...
Chainer 安全漏洞
Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...
Deserialization of Untrusted Data
Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the use of pickle as a serialization format for socket communication. An attacker can execute arbitrary code by sending maliciously crafted data that is deserialized...
PT-2025-2103 · Drupal · Drupal Monster Menus
Name of the Vulnerable Software and Affected Versions: Drupal Monster Menus versions 0.0.0 through 9.3.3 Drupal Monster Menus versions 9.4.0 through 9.4.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can potentially enable a remot...
CVE-2024-49626
Deserialization of Untrusted Data vulnerability in Piyushmca Shipyaari Shipping Management allows Object Injection.This issue affects Shipyaari Shipping Management: from n/a through 1.2...
PT-2024-33580 · Brandon Clark · Brandon Clark Sitebuilder Dynamic Components
Name of the Vulnerable Software and Affected Versions: Brandon Clark SiteBuilder Dynamic Components versions n/a through 1.0 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection in Brandon Clark SiteBuilder Dynamic Components. Recommendations: For...
WordPress plugin My Reading Library 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
CVE-2024-48028 WordPress IP Loc8 plugin <= 1.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 ip-loc8 allows Object Injection.This issue affects IP Loc8: from n/a through = 1.1...
WordPress plugin JobSearch 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...
PYSEC-2024-83
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a prediction...
PYSEC-2024-82
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with...
PYSEC-2024-82
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with...
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a prediction...
PT-2024-31811 · Mindsdb · Mindsdb
Name of the Vulnerable Software and Affected Versions: MindsDB versions 23.10.3.0 and newer Description: The issue is related to the deserialization of untrusted data in the MindsDB platform. This allows a maliciously uploaded 'inhouse' model to run arbitrary code on the server when a 'describe'...
PT-2024-31809 · Mindsdb · Mindsdb
Name of the Vulnerable Software and Affected Versions: MindsDB versions 23.3.2.0 and newer Description: The issue concerns the deserialization of untrusted data in the MindsDB platform. This allows a maliciously uploaded model to run arbitrary code on the server when interacted with...
Microsoft SharePoint SPAutoSerializingObject Deserialization of Untrusted Data Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the SPAutoSerializingObject class. The issue results from the lack of...
Delta Electronics DTN Soft 代码问题漏洞
Delta Electronics DTN Soft is a temperature controller software from Delta Electronics China. A code issue vulnerability previously existed in Delta Electronics DTN Soft version 2.0.1, which stems from the fact that the product deserializes untrusted data, potentially leading to remote code...
WordPress plugin JobSearch 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...
