1829 matches found
PT-2022-13269 · Jfrog · Jfrog Artifactory
Name of the Vulnerable Software and Affected Versions: JFrog Artifactory versions prior to 7.36.1 JFrog Artifactory versions prior to 6.23.41 Description: The issue is related to Insecure Deserialization of untrusted data. This can be exploited by a low-privileged authenticated user sending a...
JFrog Artifactory 代码问题漏洞
Jfrog JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's Jfrog that supports clustering and high-availability Docker registries, and provides an end-to-end solution for tracking artifact automation from development to production. A security vulnerabilit...
SVI MS Management System Code Issue Vulnerability
SVI MS Management System is an integrated management system. A security vulnerability exists in SVI MS Management System, which stems from insecure deserialization of user-supplied content. An attacker could exploit the vulnerability by crafting a serialized Java object that could execute arbitra...
GraniteDS Insecure Deserialization
The Java implementation of GraniteDS, version 3.1.1.GA, AMF3 deserializers derives class instances from java.io.Externalizable rather than the AMF3 specification's recommendation of flash.utils.IExternalizable. A remote attacker with the ability to spoof or control an RMI server connection may be...
GHSA-4344-FRCP-J22Q Remote code execution due to insecure deserialization
A flaw was found in the way JBoss RichFaces handled deserialization. A remote attacker could use this flaw to trigger the execution of the deserialization methods in any serializable class deployed on the server. This could lead to a variety of security impacts depending on the deserialization...
CVE-2020-23620
The Java Remote Management Interface of all versions of Orlansoft ERP was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object...
CVE-2020-23621
The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object...
Deserialization of untrusted data
The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object...
CVE-2020-23621
The Java Remote Management Interface of all versions of SVI MS Management System was discovered to contain a vulnerability due to insecure deserialization of user-supplied content, which can allow attackers to execute arbitrary code via a crafted serialized Java object...
CVE-2020-23621
CVE-2020-23621 affects the SVI MS Management System via insecure deserialization in the Java Remote Management Interface across all versions, enabling arbitrary code execution through a crafted serialized Java object. The issue is rooted in how user-supplied content is deserialized. Documented im...
Orlansoft ERP 代码问题漏洞
Orlansoft ERP is an RRP system. Orlansoft ERP has a security vulnerability that stems from insecure deserialization of user-supplied content. An attacker can execute arbitrary code via a carefully crafted serialized Java object...
SVI MS Management System 代码问题漏洞
SVI MS Management System is an integrated management system. A security vulnerability exists in SVI MS Management System, which stems from insecure deserialization of user-supplied content. An attacker could exploit the vulnerability by crafting a serialized Java object that could execute arbitra...
WordPress Booking Calendar 9.1 PHP Object Injection / Insecure Deserialization Vulnerabilities
On April 18, 2022, the Wordfence Threat Intelligence team initiated the disclosure process for an Object Injection vulnerability in the Booking Calendar plugin for WordPress, which has over 60,000 installations. We received a response the same day and sent over our full disclosure early the next...
WordPress Booking Calendar plugin <= 9.1 - Insecure Deserialization/PHP Object Injection vulnerability
Insecure Deserialization/PHP Object Injection vulnerability discovered by Ramuel Gall Wordfence in WordPress Booking Calendar plugin versions = 9.1. Solution Update the WordPress Booking Calendar plugin to the latest available version at least 9.1.1...
CVE-2022-23450
A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the...
CVE-2022-23450
A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the...
CVE-2022-23450
A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. The affected system allows remote users to send maliciously crafted objects. Due to insecure deserialization of user-supplied content by the...
PT-2022-3583 · Siemens +1 · Simatic Energy Manager Pro +2
Name of the Vulnerable Software and Affected Versions: SIMATIC Energy Manager Basic versions prior to V7.3 Update 1 SIMATIC Energy Manager PRO versions prior to V7.3 Update 1 Description: The issue is related to insecure deserialization of user-supplied content, allowing an unauthenticated attack...