12 matches found
EUVD-2023-1592
Malicious code in bioql PyPI...
CVE-2023-31890
A flaw was found in glazedlists, which permits code execution when deserializing code via the BeanXMLByteDecoder's decode method. This flaw allows an attacker to execute code on the vulnerable system...
glazedlists XML Deserialization vulnerability
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
GHSA-P6M6-9J36-VFJX glazedlists XML Deserialization vulnerability
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
CVE-2023-31890
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
Deserialization of untrusted data
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
CVE-2023-31890
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
CVE-2023-31890
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
CVE-2023-31890: Deserialization of Untrusted Data
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...
CVE-2023-31890
CVE-2023-31890 affects glazedlists v1.11.0, due to an XML deserialization flaw in BeanXMLByteCoder.decode() that allows remote code execution. The vulnerability is rated CRITICAL (CVSS v3.1: 9.8) with network attack vector, low complexity, no user interaction. Exploitation information in the conn...
PT-2023-23504 · Unknown · Glazedlists
Name of the Vulnerable Software and Affected Versions: glazedlists version 1.11.0 Description: The issue is related to an XML Deserialization vulnerability that allows an attacker to execute arbitrary code. This is achieved via the BeanXMLByteCoder.decode parameter. Recommendations: For glazedlis...
