5573 matches found
DEBIAN-CVE-2022-45136
Apache Jena SDB 3.17.0 and earlier is vulnerable to a JDBC Deserialisation attack if the attacker is able to control the JDBC URL used or cause the underlying database server to return malicious data. The mySQL JDBC driver in particular is known to be vulnerable to this class of attack. As a resu...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2020-9484Exploit Exploit for Apache Tomcat deserializati...
CVE-2022-38652
A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...
CVE-2022-38652
CVE-2022-38652 pertains to VMware Hyperic; remote insecure deserialization affects Hyperic Agent 5.8.6, allowing a malicious authenticated user to run code with Hyperic Agent privileges (often SYSTEM on Windows). Related CVE-2022-38650 affects VMware Hyperic Server 5.8.6 and is unauthenticated. R...
PT-2022-7391 · Siemens +1 · Simatic Step 7 +2
Name of the Vulnerable Software and Affected Versions: SIMATIC PCS neo version 4.0 SIMATIC STEP 7 versions 16 through 17 SIMATIC STEP 7 versions 18 through 18 Update 1 Description: A vulnerability has been identified in the affected applications, which do not properly restrict the .NET...
SAP BusinessObjects BI Platform Deserialization Vulnerability
SAP BusinessObjects BI Platform is a centralized suite for data reporting, visualization, and sharing from SAP, Germany. A deserialization vulnerability exists in SAP BusinessObjects BI Platform versions 4.2, 4.3, which arises from unsafe deserialization of serialized data received by the...
CVE-2022-41203
In some workflow of SAP BusinessObjects BI Platform Central Management Console and BI LaunchPad, an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted...
CVE-2022-41203
In some workflow of SAP BusinessObjects BI Platform Central Management Console and BI LaunchPad, an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted...
SAP BusinessObjects BI Platform 代码问题漏洞
SAP BusinessObjects BI Platform is a centralized suite for data reporting, visualization, and sharing from SAP, Germany. A deserialization vulnerability exists in SAP BusinessObjects BI Platform versions 4.2, 4.3, which arises from unsafe deserialization of serialized data received by the...
CVE-2022-41203
CVE-2022-41203 affects SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad). An authenticated user with low privileges can trick the application by substituting a serialized parameter with a malicious serialized object, causing deserialization of untrusted data and impact...
PT-2022-6646 · Vmware · Vmware Aria Operations For Networks
Name of the Vulnerable Software and Affected Versions: VMware Aria Operations for Networks affected versions not specified Description: The issue is related to a deserialization vulnerability in VMware Aria Operations for Networks. This vulnerability can be exploited by a remote attacker to execu...
CVE-2022-44542
lesspipe before 2.06 allows attackers to execute code via Perl Storable pst files, because of deserialized object destructor execution via a key/value pair in a hash...
CVE-2022-41779
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize network packets without proper verification. If the device connects to an attacker-controlled server, the attacker could send maliciously crafted packets that would be deserialized and executed, leading to remote...
CVE-2022-40202
The database backup function in Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior lacks proper authentication. An attacker could provide malicious serialized objects which, when deserialized, could activate an opcode for a backup scheduling function without authentication...
CVE-2022-38142
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...
WordPress plugin Ocean Extra 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...
CVE-2022-39944
In Apache Linkis =1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures a JDBC EC with a MySQL data source and malicious parameters. Therefore, the parameters in...
Deserialization of untrusted data
In Apache Linkis =1.2.0 when used with the MySQL Connector/J, a deserialization vulnerability with possible remote code execution impact exists when an attacker has write access to a database and configures a JDBC EC with a MySQL data source and malicious parameters. Therefore, the parameters in...
CVE-2022-39944
Summary: CVE-2022-39944 affects Apache Linkis <= 1.2.0 when used with MySQL Connector/J, enabling a deserialization vulnerability that can lead to remote code execution if an attacker has write access to a database and provides malicious parameters in a JDBC EC with a MySQL data source. The is...
Apache Linkis 代码问题漏洞
Apache Linkis is a middleware product from the Apache Foundation that establishes an effective connection between upper-tier applications and the underlying data engine. A code issue vulnerability exists in Apache Linkis version 1.2.0 and prior versions, which stems from a deserialization...