Lucene search
+L

2000 matches found

Cvelist
Cvelist
added 2024/09/25 1:57 p.m.43 views

CVE-2024-7576 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q3 2024.3.924, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS0.00463EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/25 12:00 a.m.17 views

PT-2024-38934 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q3 2024.3.924 Description: The issue is related to an insecure deserialization vulnerability, which allows for a code execution attack. This vulnerability can be exploited remotely. Recommendations: F...

7.8CVSS7.8AI score0.00246EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.12 views

Telerik UI 代码问题漏洞

Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...

7.8CVSS7.4AI score0.00246EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/09/25 12:00 a.m.9 views

Telerik UI 代码问题漏洞

Telerik UI is a suite of UI User Interface controls for application development from Telerik Bulgaria. A code issue vulnerability exists in Telerik UI versions prior to 2024.3.924, which stems from a possible code execution attack via an insecure deserialization vulnerability...

9.8CVSS7.4AI score0.00463EPSS
SaveExploits0References2
Veracode
Veracode
added 2024/09/23 7:41 a.m.10 views

Deserialization Of Untrusted Data

Sqlitedict is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure deserialization which allows attackers to execute arbitrary code by exploiting the deserialization process...

9.8CVSS7.6AI score0.00886EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2024/09/18 6:24 p.m.16 views

CVE-2024-35515

A flaw was found in sqlitedict. An attacker may be able leverage an insecure deserialization vulnerability to execute arbitrary code. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease o...

5.3CVSS9.5AI score0.00886EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/18 3:30 p.m.2 views

GHSA-G4R7-86GM-PGQC sqlitedict insecure deserialization vulnerability

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

8.8CVSS6.1AI score0.00886EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2024/09/18 3:30 p.m.30 views

sqlitedict insecure deserialization vulnerability

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS7.6AI score0.00886EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2024/09/18 3:15 p.m.21 views

CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS0.00886EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/18 3:15 p.m.12 views

CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS7.5AI score
SaveExploits0References2
OSV
OSV
added 2024/09/18 3:15 p.m.5 views

DEBIAN-CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS6.2AI score0.00886EPSS
SaveExploits0References1
OSV
OSV
added 2024/09/18 3:15 p.m.7 views

UBUNTU-CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS6AI score0.00886EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/18 12:00 a.m.11 views

sqlitedict 代码注入漏洞

sqlitedict is a lightweight wrapper around Python's sqlite3 database by the individual developer Radim Řehůřek. A code injection vulnerability exists in sqlitedict version 2.1.0 and earlier, which stems from insecure deserialization handling and could allow an attacker to execute arbitrary code...

9.8CVSS6.3AI score0.00886EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/09/18 12:00 a.m.15 views

CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

7.6AI score0.00886EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/09/18 12:00 a.m.9 views

PT-2024-26524

Name of the Vulnerable Software and Affected Versions sqlitedict versions up to v2.1.0 Description The issue is related to insecure deserialization, which allows attackers to execute arbitrary code. Recommendations For versions up to v2.1.0, update to a version later than v2.1.0 to resolve the...

9.8CVSS6.3AI score0.00886EPSS
SaveExploits0References16
Cvelist
Cvelist
added 2024/09/18 12:00 a.m.28 views

CVE-2024-35515

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

0.00886EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/18 12:00 a.m.65 views

CVE-2024-35515

CVE-2024-35515 concerns insecure deserialization in the Python package sqlitedict (up to v2.1.0), enabling arbitrary code execution. Multiple connected sources corroborate that the vulnerable component is sqlitedict, and the root cause is insecure deserialization. Impact is high (arbitrary code e...

9.8CVSS7.9AI score0.00886EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/08/20 12:00 a.m.12 views

Hertzbeat 安全漏洞

Hertzbeat is an open source real-time monitoring system from the dromara organization. A security vulnerability exists in Hertzbeat prior to version 1.6.0 that stems from an insecure deserialization issue in the /api/monitors/import location that could lead to remote code execution...

8.8CVSS7.9AI score0.0133EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/08/20 12:00 a.m.10 views

Samson 安全漏洞

Samson is a Zendesk open source web interface for deployment. A security vulnerability exists in Samson versions prior to v3385 that stems from the presence of insecure deserialization that could lead to remote code execution RCE...

8.8CVSS7.8AI score0.0113EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/08/20 12:00 a.m.12 views

PT-2024-8008 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: PP TeleControl Server Basic versions prior to V3.1.2.1 with redundancy configured TeleControl Server Basic versions prior to V3.1.2.1 with redundancy configured Description: The affected system allows remote users to send maliciously crafted...

10CVSS8.1AI score0.00996EPSS
SaveExploits0References15
Rows per page
Query Builder