SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad) Insecure Deserialization

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is prior to 4.2 SP9 P11, 4.3 SP2 P7 or 4.3 SP3. It is, therefore, affected by insecure deserialization vulnerability. In some workflow of SAP BusinessObjects BI Platform Central Management Conso...

Cisco Unity Express Insecure Deserialization (CVE-2018-15381)

An insecure deserialization vulnerability exists in Cisco Unity Express. Successful exploitation of this vulnerability would allow remote attackers to send a specially crafted serialized object to the vulnerable server...

Qognify Ocularis Insecure Deserialization (CVE-2020-27868)

An insecure deserialization vulnerability exists in Qognify Ocularis. Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code on the target system...

Ivanti Avalanche DataRepository Service Insecure Deserialization (CVE-2021-42130)

An insecure deserialization vulnerability exists in the Ivanti Avalanche DataRepository service. The vulnerability is due to insufficient validation of serialized data sent to the DataRepository service...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

CVE-2022-38652

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenticated user to run arbitrary code or malware within a Hyperic Agent instance and its host operating system with the privileges of the Hyperic Agent...

PT-2022-24502 · Vmware · Vmware Hyperic Agent

Name of the Vulnerable Software and Affected Versions: VMWare Hyperic Agent version 5.8.6 Description: A remote insecure deserialization issue exists, allowing a malicious authenticated user to execute arbitrary code or malware within a Hyperic Agent instance and its host operating system with th...

CVE-2022-38650

CVE-2022-38650 (VMware Hyperic Server 5.8.6) is a remote, unauthenticated insecure deserialization vulnerability in VMware Hyperic Server 5.8.6 that allows an attacker to execute arbitrary code with the Hyperic server process privileges (host OS level). Connected documents also note a related iss...

PT-2022-24500 · Vmware · Vmware Hyperic Server

Name of the Vulnerable Software and Affected Versions: VMware Hyperic Server version 5.8.6 Description: A remote unauthenticated insecure deserialization vulnerability exists, enabling a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the...

VMWare Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual, and cloud environments. A code issue vulnerability exists in VMWare...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

CVE-2022-38650

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to run arbitrary code or malware within Hyperic Server and the host operating system with the privileges of the Hyperic server proces...

VMware Hyperic 代码问题漏洞

VMWare Hyperic is an application monitoring component of the Cloud Application Platform from VMWare, Inc. It enables IT professionals to manage the performance and availability of customized web applications in physical, virtual and cloud environments. A code issue vulnerability exists in VMware...

Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

...

fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

Impact A remote code execution RCE vulnerability in non-default configurations of Fluentd allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Fluentd setups are only affected if the environment variable FLUENTOJOPTIONMODE is explicitly set to object...

CVE-2022-39379 Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution RCE vulnerability in non-default configurations of Fluentd allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads...

drools 代码问题漏洞

drools is KIE open source a business rules management system . Open source rules engine, DMN engine and Complex Event Processing CEP engine for the Java and JVM platforms. drools has a security vulnerability , the vulnerability stems from its insecure data deserialization...

Horde Groupware Webmail Edition Insecure Deserialization (CVE-2022-30287)

An insecure deserialization vulnerability exists in Horde Groupware Webmail Edition. This vulnerability is due to improper input validation of the source parameter used for fetching an address book configuration...