Lucene search
+L

29897 matches found

CNNVD
CNNVD
added 2026/02/11 12:00 a.m.22 views

WordPress plugin wpForo Forum 代码问题漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

8.8CVSS5.9AI score0.0052EPSS
SaveExploits0References4
Snyk
Snyk
added 2026/02/10 6:55 p.m.9 views

Deserialization of Untrusted Data

Overview azure-ai-language-conversations-authoring is a Microsoft Corporation Azure Ai Language Conversations Authoring Client Library for Python Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the getcontinuationtoken function. An attacker can execute...

9.8CVSS6.1AI score0.0243EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/10 6:30 p.m.18 views

GHSA-436V-JG82-P533 Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...

9.8CVSS5.8AI score0.0243EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/02/10 6:30 p.m.15 views

Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

Deserialization of untrusted data in the Azure AI Language Conversations Authoring client library for Python allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.0243EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/02/10 6:16 p.m.27 views

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS0.0243EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/10 6:16 p.m.23 views

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS6AI score0.0243EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/10 6:16 p.m.17 views

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS0.03768EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/10 6:16 p.m.21 views

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.8AI score0.03768EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.12 views

CVE-2026-21511

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.5AI score0.03768EPSS
SaveExploits0References2Affected Software10
ATTACKERKB
ATTACKERKB
added 2026/02/10 5:51 p.m.13 views

CVE-2026-21531

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.0243EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.11 views

Microsoft Outlook Spoofing Vulnerability

Deserialization of untrusted data in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network...

7.5CVSS5.5AI score0.03768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2026/02/10 4:00 p.m.22 views

Azure SDK for Python Remote Code Execution Vulnerability

Deserialization of untrusted data in Azure SDK allows an unauthorized attacker to execute code over a network...

9.8CVSS5.8AI score0.0243EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/02/10 3:28 p.m.156 views

Exploit for CVE-2026-2969

This repository contains public information for the disclosure o...

5.8CVSS5AI score0.00821EPSS
SaveExploits3
OSV
OSV
added 2026/02/10 4:16 a.m.8 views

CVE-2026-23685

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS5.8AI score0.00129EPSS
SaveExploits0References2
NVD
NVD
added 2026/02/10 4:16 a.m.22 views

CVE-2026-23685

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS0.00129EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/10 3:02 a.m.6 views

CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS5.6AI score0.00129EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/10 3:02 a.m.47 views

CVE-2026-23685

CVE-2026-23685 describes a deserialization vulnerability in the SAP NetWeaver JMS service. An attacker authenticated as an administrator with local access can submit specially crafted content to the server; if processed by the application, this may trigger unintended logic execution that leads to...

4.4CVSS5.6AI score0.00129EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/02/10 3:02 a.m.42 views

CVE-2026-23685 Insecure Deserialization vulnerability in SAP NetWeaver (JMS service)

Due to a Deserialization vulnerability in SAP NetWeaver JMS service, an attacker authenticated as an administrator with local access could submit specially crafted content to the server. If processed by the application, this content could trigger unintended behavior during internal logic executio...

4.4CVSS0.00129EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/02/10 12:33 a.m.177 views

Exploit for Improper Authentication in Oracle Concurrent_Processing

Affected Software: Oracle BI Publisher versions 12.2.1.4.0, 12...

9.8CVSS6.7AI score0.99732EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2026/02/10 12:19 a.m.178 views

Exploit for Deserialization of Untrusted Data in Facebook React

Affected Software: React Server Components versions 19.0.0, 1...

10CVSS6.5AI score0.99802EPSS
SaveExploits391
Rows per page
Query Builder