Lucene search
K

4 matches found

Veracode
Veracode
added 2022/10/14 2:17 a.m.21 views

Deserialization Of Untrusted Data

melisplatform/melis-front is vulnerable to deserialization of untrusted data. The vulnerability exists in multiple functions because of adding allowedclasses=false param to the unserialize function which allows an attacker to execute of arbitrary PHP code on the system...

9.8CVSS9.4AI score0.00935EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/10/12 12:0 a.m.2 views

Media Links routers 代码问题漏洞

Media Links routers are a series of wireless routers from the Japanese company Media Links. Media Links routers are vulnerable to a code issue that originates from an attacker being able to deserialize arbitrary data from melisplatform/melis-front, ultimately leading to the execution of arbitrary...

9.8CVSS8.8AI score0.00935EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/10/11 8:45 p.m.18 views

melisplatform/melis-front vulnerable to deserialization of untrusted data

Impact Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-front =...

9.8CVSS9.3AI score0.00935EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/10/11 8:45 p.m.18 views

GHSA-H479-2MV4-5C26 melisplatform/melis-front vulnerable to deserialization of untrusted data

Impact Attackers can deserialize arbitrary data on affected versions of melisplatform/melis-front, and ultimately leads to the execution of arbitrary PHP code on the system. Conducting this attack does not require authentication. Users should immediately upgrade to melisplatform/melis-front =...

7.7CVSS8.8AI score0.00935EPSS
Exploits0References4
Rows per page
Query Builder