Lucene search
+L

5529 matches found

OSV
OSV
added 2024/01/03 10:15 a.m.5 views

CVE-2023-51785

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

7.5CVSS5.9AI score0.01012EPSS
SaveExploits0References2
Prion
Prion
added 2024/01/03 10:15 a.m.20 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Apache InLong.This issue affects Apache InLong: from 1.7.0 through 1.9.0, the attackers can make a arbitrary file read attack using mysql driver. Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick 1 to solve it. 1 ...

5CVSS7.1AI score0.01012EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/01/03 12:0 a.m.7 views

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a code issue vulnerability that stems from the presence of a deserialization vulnerability. An attacker can explo...

7.5CVSS7.3AI score0.01012EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/31 11:15 a.m.27 views

CVE-2023-49777

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

9.1CVSS0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/31 11:15 a.m.8 views

CVE-2023-49777

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Product Add-Ons.This issue affects YITH WooCommerce Product Add-Ons: from n/a through 4.3.0...

8.8CVSS5.8AI score0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/31 10:15 a.m.6 views

CVE-2023-52181

Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1...

9.8CVSS7.3AI score0.00646EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/31 10:15 a.m.7 views

CVE-2023-52182

Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0...

8.8CVSS7.3AI score0.00627EPSS
SaveExploits0References1
NVD
NVD
added 2023/12/31 10:15 a.m.14 views

CVE-2023-52181

Deserialization of Untrusted Data vulnerability in Presslabs Theme per user.This issue affects Theme per user: from n/a through 1.0.1...

10CVSS0.00646EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/29 1:15 p.m.5 views

CVE-2023-51414

Deserialization of Untrusted Data vulnerability in EnvialoSimple EnvíaloSimple: Email Marketing y Newsletters.This issue affects EnvíaloSimple: Email Marketing y Newsletters: from n/a through 2.1...

9.8CVSS7.3AI score
SaveExploits0References1
OSV
OSV
added 2023/12/29 1:15 p.m.6 views

CVE-2023-51505

Deserialization of Untrusted Data vulnerability in realmag777 Active Products Tables for WooCommerce. Professional products tables for WooCommerce store.This issue affects Active Products Tables for WooCommerce. Professional products tables for WooCommerce store : from n/a through 1.0.6...

9.8CVSS7.3AI score0.00651EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/29 12:0 a.m.8 views

PT-2023-31842 · Woocommerce · Active Products Tables For Woocommerce

Name of the Vulnerable Software and Affected Versions: Active Products Tables for WooCommerce versions 1.0.6 and earlier Description: The issue is related to Deserialization of Untrusted Data in Active Products Tables for WooCommerce, which affects professional products tables for WooCommerce...

10CVSS9.1AI score0.00651EPSS
SaveExploits0References6
OSV
OSV
added 2023/12/28 11:15 a.m.4 views

CVE-2023-32513

Deserialization of Untrusted Data vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fundraising Platform: from n/a through 2.25.3...

9.8CVSS7.3AI score0.00592EPSS
SaveExploits0References1
Prion
Prion
added 2023/12/28 11:15 a.m.12 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5...

6.5CVSS7.2AI score0.00478EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/28 12:0 a.m.8 views

PT-2023-23846 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions prior to 2.25.3 Description: The issue is related to the deserialization of untrusted data. This problem can be exploited in GiveWP – Donation Plugin and Fundraising Platform. There i...

9.8CVSS9.2AI score0.00592EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2023/12/27 12:0 a.m.15 views

PT-2023-31884 · WordPress · Unofficial Mobile Bankid Integration For Wordpress

Name of the Vulnerable Software and Affected Versions: Unofficial Mobile BankID Integration for WordPress versions prior to 1.0.1 Description: The issue is related to a Deserialization of Untrusted Data vulnerability, specifically impacting scenarios where an attacker can manipulate the database...

9.8CVSS9.8AI score0.00546EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/12/27 12:0 a.m.6 views

WordPress plugin Unofficial Mobile BankID Integration Code Issue Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS7.1AI score0.00546EPSS
SaveExploits0References3
NVD
NVD
added 2023/12/25 8:15 a.m.40 views

CVE-2022-34268

An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host...

9.8CVSS0.01455EPSS
SaveExploits1References2
Prion
Prion
added 2023/12/25 8:15 a.m.18 views

Authentication flaw

An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host...

7.5CVSS7.5AI score0.01455EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2023/12/21 1:15 p.m.4 views

CVE-2023-49826

Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1...

9.8CVSS5.8AI score0.00567EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/21 1:15 p.m.4 views

CVE-2023-49778

Deserialization of Untrusted Data vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6...

9.8CVSS5.8AI score0.00753EPSS
SaveExploits0References1
Rows per page
Query Builder