CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2026/06/26 12:00 a.m.•4 views

CVE-2026-57527: Deserialization of Untrusted Data

Zed Attack Proxy ZAP ViewState add-on before version 4 contains an insecure deserialization vulnerability that allows attackers who control a proxied web server to achieve arbitrary code execution by embedding a malicious serialized Java object in the javax.faces.ViewState HTTP response parameter...

8.8CVSS6.4AI score0.00682EPSS

SaveExploits0References2

Prion•added 2020/04/27 3:15 p.m.•28 views

Deserialization of untrusted data

The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization...

10CVSS9.8AI score0.10118EPSS

SaveExploits5References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/04/27 12:00 a.m.•2 views

CVE-2020-12133: Deserialization of Untrusted Data

The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization...

10CVSS8.7AI score0.10118EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by