Lucene search
+L

29649 matches found

CNNVD
CNNVD
added 2026/03/31 12:00 a.m.17 views

NVIDIA BioNeMo 代码问题漏洞

NVIDIA BioNeMo is a generative AI model development and training platform for the biomedical field developed by NVIDIA Corporation. NVIDIA BioNeMo has code vulnerabilities, which stem from the deserialization of unreliable data. These vulnerabilities may lead to code execution, denial of service,...

8.8CVSS5.9AI score0.00312EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.10 views

PT-2026-29295

Name of the Vulnerable Software and Affected Versions NVIDIA BioNeMo affected versions not specified Description An issue exists where a user can trigger the deserialization of untrusted data. Deserialization is the process of converting a data format, such as JSON or XML, back into an object tha...

8.8CVSS6AI score0.00312EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/03/31 12:00 a.m.27 views

PT-2026-29294

Name of the Vulnerable Software and Affected Versions NVIDIA BioNeMo affected versions not specified Description The software contains a flaw that could allow a user to trigger the deserialization of untrusted data. Exploitation of this issue may result in code execution, denial of service,...

9.8CVSS5.9AI score0.00472EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/03/30 3:32 p.m.17 views

EUVD-2026-17079

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user.This issue affects Fireware OS: 12.1 through 12.11.8 and 2025.1...

8.4CVSS6.2AI score0.00271EPSS
SaveExploits0References2
NVD
NVD
added 2026/03/30 1:16 p.m.15 views

CVE-2026-4266

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that...

8.4CVSS0.00271EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/30 12:38 p.m.6 views

CVE-2026-4266 WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that...

8.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/30 12:38 p.m.45 views

CVE-2026-4266

CVE-2026-4266 describes an insecure deserialization in WatchGuard Fireware OS. Affects Fireware OS versions 12.1–12.11.8 and 2025.1–2026.1.2; Firebox platforms without Access Portal (e.g., T-15, T-35) are not affected. The vulnerability allows an attacker who has obtained write access to the loca...

8.4CVSS5.8AI score0.00271EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/03/30 12:38 p.m.36 views

CVE-2026-4266 WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerability to execute arbitrary code in the context of the portald user. Note, this vulnerability does not affect Firebox platforms that...

8.4CVSS0.00271EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/03/30 12:27 p.m.144 views

Exploit for Deserialization of Untrusted Data in Facebook React

No d...

10CVSS5.8AI score0.99802EPSS
SaveExploits389
EUVD
EUVD
added 2026/03/30 9:31 a.m.9 views

EUVD-2026-17071

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS5.9AI score0.00205EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/30 8:16 a.m.10 views

CVE-2026-4416

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS0.00205EPSS
SaveExploits0References2
CVE
CVE
added 2026/03/30 7:52 a.m.24 views

CVE-2026-4416

The CVE-2026-4416 entry concerns Gigabyte Control Center’s Performance Library, where an Insecure Deserialization vulnerability in the EasyTune Engine service allows authenticated local attackers to send a crafted serialized payload and achieve privilege escalation. The NVD/NVD-derived metrics in...

8.5CVSS5.9AI score0.00205EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/30 7:52 a.m.7 views

CVE-2026-4416 GIGABYTE|Performance Library - Insecure Deserialization

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS5.9AI score0.00205EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/03/30 7:52 a.m.3 views

CVE-2026-4416

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS5.9AI score0.00205EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/03/30 7:52 a.m.35 views

CVE-2026-4416 GIGABYTE|Performance Library - Insecure Deserialization

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS0.00205EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/03/30 5:00 a.m.9 views

CVE-2026-4851

GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization. GRID::Machine provides Remote Procedure Calls RPC over SSH for Perl. The client connects to remote hosts to execute code on them. A compromised or malicious remote host can execute arbitrary...

9.8CVSS6.6AI score0.0047EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/03/30 12:00 a.m.18 views

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software operated by the American company WatchGuard, running on Firebox devices. Versions 12.1 to 12.11.8 and 2025.1 to 2026.1.2 of WatchGuard Fireware OS contain security vulnerabilities due to insecure deserialization, which may allow arbitrary code to be executed i...

8.4CVSS6AI score0.00271EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.15 views

PT-2026-28807

Name of the Vulnerable Software and Affected Versions Gigabyte Control Center versions affected versions not specified Description The Performance Library component of Gigabyte Control Center contains an issue where maliciously serialized data can be sent to the EasyTune Engine service. An...

8.5CVSS5.9AI score0.00205EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/30 12:00 a.m.25 views

PT-2026-29022

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS versions 12.1 through 12.11.8 WatchGuard Fireware OS versions 2025.1 through 2026.1.2 Description An Insecure Deserialization issue exists in WatchGuard Fireware OS. An attacker gaining write access to the local filesyst...

8.4CVSS5.7AI score0.00271EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/03/30 12:00 a.m.18 views

Amazon Linux 2023 : ocaml, ocaml-compiler-libs, ocaml-ocamldoc (ALAS2023-2026-1479)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1479 advisory. In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization runtime/intern.c enables remote code execution through a multi-phase attack chain. The vulnerability stems fro...

7.9CVSS6.6AI score0.0021EPSS
SaveExploits0References4
Rows per page
Query Builder