Insecure Deserialization

Apache Lucene.Net.Replicator is vulnerable to Insecure Deserialization. The vulnerability exists due to the deserialization of untrusted data without adequate validation, allowing an attacker who intercepts traffic or controls the replication node URL to send a malicious JSON response...

PT-2025-25271 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected...

PT-2024-15972 · Progress · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue allows for potential code execution, posing a significant risk...

PT-2024-15973 · Telerik · Telerik Ui For Winforms

Name of the Vulnerable Software and Affected Versions: Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue allows for code execution, which can lead to significant security...

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

CVE-2024-44102

A vulnerability has been identified in PP TeleControl Server Basic 1000 to 5000 V3.1 6NH9910-0AA31-0AE1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 256 to 1000 V3.1 6NH9910-0AA31-0AD1 All versions V3.1.2.1 with redundancy configured, PP TeleControl Server Basic 3...

CVE-2024-44102

Summary: CVE-2024-44102 affects Siemens TeleControl Server Basic (various edition/versions listed in the CVE) where remote attackers can trigger a deserialization of user-supplied content, allowing an unauthenticated attacker to execute arbitrary code with SYSTEM privileges. The root cause is ins...

CVE-2024-50006

In the Linux kernel, the following vulnerability has been resolved: ext4: fix idatasem unlock order in ext4indmigrate Fuzzing reports a possible deadlock in jbd2logwaitcommit. This issue is triggered when an EXT4IOCMIGRATE ioctl is set to require synchronous updates because the file descriptor is...

PT-2025-25265 · Trend Micro · Trend Micro Endpoint Encryption

Name of the Vulnerable Software and Affected Versions: Trend Micro Endpoint Encryption versions prior to 6.0.0.4013 Description: An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected...

VulnCheck KEV: CVE-2024-8316

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

VulnCheck KEV: CVE-2024-7576

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-8316

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-8316

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-7576

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-7576

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

CVE-2024-8316

CVE-2024-8316 affects Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924). It is caused by an insecure deserialization vulnerability that can lead to remote code execution (documented as a code execution attack). The CVE entry notes a local attack vector with low privileges and no ...

CVE-2024-7576 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...