Lucene search
+L

2015 matches found

Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.15 views

PT-2024-34607 · Hodoku · Hodoku

Name of the Vulnerable Software and Affected Versions: Hodoku versions 2.3.0 through 2.3.2 Description: Insecure deserialization in Hodoku allows attackers to execute arbitrary code. Recommendations: For versions 2.3.0 through 2.3.2, update to a version that fixes the insecure deserialization...

9.8CVSS7.7AI score0.00636EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/03 12:00 a.m.9 views

HoDoKu 安全漏洞

HoDoKu is HoDoKu open source a Sudoku generator/solver/analyzer written in Java. A security vulnerability exists in HoDoKu versions v2.3.0 through v2.3.2, which stems from the presence of insecure deserialization that allows an attacker to execute arbitrary code...

9.8CVSS7.3AI score0.00636EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/03 12:00 a.m.15 views

CVE-2024-51363

Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...

7.7AI score0.00636EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/03 12:00 a.m.28 views

CVE-2024-51363

Insecure deserialization in Hodoku v2.3.0 to v2.3.2 allows attackers to execute arbitrary code...

0.00636EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/03 12:00 a.m.86 views

CVE-2024-51363

Hodoku (open-source Java) versions 2.3.0–2.3.2 are affected by insecure deserialization that allows remote arbitrary code execution. The issue stems from deserializing untrusted data, enabling an attacker to run code on the affected system. Reported uniformly across multiple sources (Red Hat, NVD...

9.8CVSS7.9AI score0.00636EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.4 views

PT-2024-9307 · Drupal · Drupal Core

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Drupal Core versions 11.0.0 through 11.0.7 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This c...

10CVSS9.7AI score0.00826EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2024/11/20 12:00 a.m.7 views

PT-2024-9323 · Drupal +1 · Drupal Core +1

Name of the Vulnerable Software and Affected Versions: Drupal Core versions 7.0 through 7.101 Drupal Core versions 8.0.0 through 10.2.10 Drupal Core versions 10.3.0 through 10.3.8 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This can...

10CVSS9.8AI score0.00983EPSS
SaveExploits0References19
Positive Technologies
Positive Technologies
added 2024/11/15 12:00 a.m.13 views

PT-2025-25272 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation, which could lead to a pre-authentication remote code execution on affected installations. This vulnerability is...

10CVSS9.5AI score0.02074EPSS
SaveExploits0References17
NVD
NVD
added 2024/11/13 4:15 p.m.43 views

CVE-2024-10012

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/13 4:15 p.m.9 views

CVE-2024-10012

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS6.2AI score0.00228EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/13 4:15 p.m.14 views

CVE-2024-10013

In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS6.2AI score0.00222EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 3:19 p.m.60 views

CVE-2024-10012

The CVE-2024-10012 entry concerns Progress Telerik UI for WPF. Affected software: Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111). Issue: insecure deserialization leading to a code execution attack. Impact: described as a code execution vulnerability with HIGH severity in offi...

7.8CVSS7.9AI score0.00228EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/13 3:19 p.m.8 views

CVE-2024-10012 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS7.5AI score0.00228EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/13 3:19 p.m.33 views

CVE-2024-10012 Progress UI for WPF format provider unsafe deserialization vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure deserialization vulnerability...

7.8CVSS0.00228EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/13 3:17 p.m.76 views

CVE-2024-10013

CVE-2024-10013 affects Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113). The vulnerability is an insecure deserialization leading to code execution. Underlying issue: deserialization of untrusted data within the WinForms UI suite. Impact is described as total in the risk m...

7.8CVSS7.9AI score0.00222EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2024/11/13 10:54 a.m.24 views

Insecure Deserialization

Apache Lucene.Net.Replicator is vulnerable to Insecure Deserialization. The vulnerability exists due to the deserialization of untrusted data without adequate validation, allowing an attacker who intercepts traffic or controls the replication node URL to send a malicious JSON response...

8.1CVSS6.7AI score0.0119EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/13 12:00 a.m.14 views

PT-2024-15973 · Telerik · Telerik Ui For Winforms

Name of the Vulnerable Software and Affected Versions: Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue allows for code execution, which can lead to significant security...

7.8CVSS7AI score0.00222EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/11/13 12:00 a.m.11 views

PT-2024-15972 · Progress · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue allows for potential code execution, posing a significant risk...

7.8CVSS7.8AI score0.00228EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/11/13 12:00 a.m.15 views

PT-2025-25271 · Trend Micro · Trend Micro Apex Central

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex Central versions prior to 8.0.7007 Description: The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected...

9.8CVSS9.5AI score0.01415EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2024/11/13 12:00 a.m.12 views

Progress Telerik UI 代码问题漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress USA. A code issue vulnerability exists in versions of Progress Telerik UI prior to 2024 Q4 that stems from insecure deserialization and could lead to a code execution attack...

7.8CVSS7.2AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder