5535 matches found
OESA-2025-1044 apache-mina security update
Apache MINA is a network application framework which helps users develop high performance and high scalability network applications easily. It provides an abstract event-driven asynchronous API over various transports such as TCP/IP and UDP/IP via Java NIO. Security Fixes: The...
CVE-2024-12703
CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstation when a non-admin authenticated user opens a malicious project file...
CVE-2024-12703
The CVE-2024-12703 entry describes a CWE-502 deserialization of untrusted data vulnerability in Schneider Electric RemoteConnect and SCADAPack x70 Utilities. The flaw could allow loss of confidentiality, integrity, and potentially remote code execution on a workstation when a non-admin authentica...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57763
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField...
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-13163
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...
CVE-2024-13163
Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...
Deserialization of Untrusted Data
Overview rasa-pro is a State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development. Affected versions of this package are vulnerable to Deserialization of Untrusted Data by loading a maliciously crafted model in...
AquilaCMS 安全漏洞
AquilaCMS is a complete multipurpose open source CMS from the AquilaCMS team. A security vulnerability exists in AquilaCMS version 1.412.13, which stems from the fact that incorrect manipulation of the parameter PostBody.population can lead to deserialization...
CVE-2024-57762
MSFM prior to 2025.01.01 is affected by a deserialization vulnerability via the pom.xml configuration file (CVE-2024-57762). The issue is documented across multiple sources, with the recommended fix to upgrade to version 2025.01.01 or later; a temporary mitigation is to restrict access to the pom...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
CVE-2024-57766
MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField...
CVE-2024-57764
MSFM prior to 2025-01-01 contains a fastjson deserialization vulnerability in the system/table/add component. CVSS v3.1 base score 9.1 (CRITICAL); attack vector: NETWORK, authentication: NONE, user interaction: NONE, privileges required: NONE, scope: UNCHANGED; impacts: confidentiality and integr...
CVE-2024-57762
MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file...
Mysiteforme 安全漏洞
Mysiteforme is a permission management system for wangl1989 individual developers. A security vulnerability exists in Mysiteforme versions prior to v2025.01.01, which stems from the inclusion of a deserialization vulnerability discovered via the pom.xml configuration file...