Lucene search
K

12 matches found

Veracode
Veracode
added 2024/04/30 7:47 a.m.15 views

Deserialization Of Untrusted Data

ops-cli is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper handling of user-supplied data in the checkoutrepo function, which allows an attacker to execute arbitrary code on the victim's machine...

9.8CVSS9.8AI score0.15132EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/05/24 7:17 p.m.4 views

GHSA-X23Q-4J9J-9CXW Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

9.8CVSS9.6AI score0.15132EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/05/24 7:17 p.m.15 views

Ops CLI Deserialization of Untrusted Data vulnerability

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

10CVSS7.7AI score0.15132EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2021/10/15 3:15 p.m.9 views

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

10CVSS0.15132EPSS
Exploits0References1
OSV
OSV
added 2021/10/15 3:15 p.m.13 views

CVE-2021-40720

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

9.8CVSS9.6AI score
Exploits0References1
Prion
Prion
added 2021/10/15 3:15 p.m.11 views

Deserialization of untrusted data

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

10CVSS9.6AI score0.15132EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/10/15 3:15 p.m.15 views

PYSEC-2021-380

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

10CVSS7AI score0.15132EPSS
Exploits0References1
CVE
CVE
added 2021/10/15 2:22 p.m.48 views

CVE-2021-40720

Ops CLI (version 2.0.4 and earlier) is affected by a Deserialization of Untrusted Data vulnerability in the checkout_repo function that allows arbitrary code execution when processing a malicious file. This is documented across multiple sources (e.g., Veracode and OSV/GHSA entries) as a vulnerabi...

10CVSS9.6AI score0.15132EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/15 2:22 p.m.13 views

CVE-2021-40720 Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution

Ops CLI version 2.0.4 and earlier is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkoutrepo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine...

9.8CVSS9.8AI score0.15132EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/14 12:0 a.m.2 views

Adobe Ops-cli 代码问题漏洞

Adobe Ops-cli is a Cli wrapper for Terraform, Ansible, Helmfile, and Ssh for cloud automation from Adobe USA. A code issue vulnerability exists in Adobe ops-cli that stems from the product not doing valid validation of input data during deserialization. The vulnerability can be exploited to execu...

10CVSS8.8AI score0.15132EPSS
Exploits0References3
Adobe
Adobe
added 2021/10/12 12:0 a.m.34 views

APSB21-88  Security update available for Adobe ops-cli

Adobe has released an update for Adobe ops-cli. This update resolves a critical vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

10CVSS10AI score0.15132EPSS
Exploits0Affected Software1
CISA
CISA
added 2021/10/12 12:0 a.m.13 views

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

6.7AI score
Exploits0References7
Rows per page
Query Builder