GHSA-CRQF-Q9FP-HWJW Spring-Kafka has Java Deserialization vulnerability When Improperly Configured

In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers...

Spring Framework 代码问题漏洞

Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. A security vulnerability exists in Spring Framework that stems from the presence of a deserialization vulnerability that allows the...

Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could result in code execution in the context of the current user...

Huawei HarmonyOS input module deserialization vulnerability

Huawei HarmonyOS is a microkernel-based, full-scenario distributed operating system from Huawei, China. A deserialization vulnerability exists in the Huawei HarmonyOS input module, which can be exploited by a remote attacker to submit a special request and trick a user into parsing it, potentiall...

CVE-2023-39396

Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability...

CVE-2023-39396

Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability...

CVE-2023-39396

CVE-2023-39396 is linked to Huawei HarmonyOS: a deserialization vulnerability in the input module. The issue allows a remote attacker to submit crafted requests and potentially render the system unusable, impacting availability. Concrete exploit details, affected versions, root cause specifics, a...

HUAWEI EMUI 代码问题漏洞

Huawei HarmonyOS is a microkernel-based, full-scenario distributed operating system from Huawei, China. A deserialization vulnerability exists in the Huawei HarmonyOS input module, which can be exploited by a remote attacker to submit a special request and trick a user into parsing it, potentiall...

USN-6277-1 php-dompdf vulnerabilities

It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstances. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2014-5011,...

CVE-2023-36480

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

Design/Logic Flaw

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

Deserialization of Untrusted Data

The Aerospike Java client is a Java application that implements a network protocol to communicate with an Aerospike server. Prior to versions 7.0.0, 6.2.0, 5.2.0, and 4.5.0 some of the messages received from the server contain Java objects that the client deserializes when it encounters them...

IBM SDK, Java Technology Edition Code Issue Vulnerability

IBM SDK, Java Technology Edition is a software development kit for Java application development from International Business Machines IBM. A security vulnerability exists in IBM SDK, Java Technology Edition that stems from a deserialization vulnerability in IBM SDK, Java Technology Edition. An...

CVE-2021-31680

Deserialization of Untrusted Data vulnerability in yolo 5 allows attackers to execute arbitrary code via crafted yaml file...

CVE-2021-31681

Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...

CVE-2021-31681

Deserialization of Untrusted Data vulnerability in yolo 3 allows attackers to execute arbitrary code via crafted yaml file...

The vulnerability of the ColdFusion software platform, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IBM B2B Advanced Communications 代码问题漏洞

IBM B2B Advanced Communications is a comprehensive business-to-business B2B integration solution from International Business Machines IBM. It is part of the IBM Sterling B2B Integration product family and is designed to simplify and optimize B2B interactions between businesses and partners. A...

GreenShot 安全漏洞

GreenShot is a lightweight screenshot software tool for Windows from GreenShot. A security vulnerability exists in GreenShot prior to version 1.2.10. The vulnerability stems from a deserialization operation performed by GreenShot when opening a .greenshot file, which is vulnerable due to security...