EUVD-2023-1592

Malicious code in bioql PyPI...

CVE-2023-31890

A flaw was found in glazedlists, which permits code execution when deserializing code via the BeanXMLByteDecoder's decode method. This flaw allows an attacker to execute code on the vulnerable system...

glazedlists XML Deserialization vulnerability

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

com.github.heuermh.adamexplorer:adam-explorer_2.11 (0.30.0), com.github.heuermh.adamexplorer:adam-explorer_2.12 (>=0.32.0, <=1.0) +15 more potentially affected by CVE-2023-31890 via com.glazedlists:glazedlists (1.11.0)

com.glazedlists:glazedlists MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.glazedlists:glazedlists and may be impacted: - com.github.heuermh.adamexplorer:adam-explorer2.11 0.30.0 -...

GHSA-P6M6-9J36-VFJX glazedlists XML Deserialization vulnerability

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

com.github.heuermh.adamexplorer:adam-explorer_2.11 (0.30.0), com.github.heuermh.adamexplorer:adam-explorer_2.12 (>=0.32.0, <=1.0) +15 more potentially affected by CVE-2023-31890 via com.glazedlists:glazedlists (1.11.0)

com.glazedlists:glazedlists MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.glazedlists:glazedlists and may be impacted: - com.github.heuermh.adamexplorer:adam-explorer2.11 0.30.0 -...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

Deserialization of untrusted data

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

PT-2023-23504 · Unknown · Glazedlists

Name of the Vulnerable Software and Affected Versions: glazedlists version 1.11.0 Description: The issue is related to an XML Deserialization vulnerability that allows an attacker to execute arbitrary code. This is achieved via the BeanXMLByteCoder.decode parameter. Recommendations: For glazedlis...

CVE-2023-31890

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890: Deserialization of Untrusted Data

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

CVE-2023-31890

CVE-2023-31890 affects glazedlists v1.11.0, due to an XML deserialization flaw in BeanXMLByteCoder.decode() that allows remote code execution. The vulnerability is rated CRITICAL (CVSS v3.1: 9.8) with network attack vector, low complexity, no user interaction. Exploitation information in the conn...