Lucene search
K

14 matches found

OSV
OSV
added 2024/11/22 8:15 p.m.1 views

CVE-2024-5579

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS7.5AI score
Exploits0References2
NVD
NVD
added 2024/11/22 8:15 p.m.6 views

CVE-2024-5579

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS0.11007EPSS
Exploits0References2
NVD
NVD
added 2024/11/22 8:15 p.m.5 views

CVE-2023-51641

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

9.8CVSS0.06281EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2024/11/22 8:15 p.m.0 views

CVE-2023-51641

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

9.8CVSS6.3AI score0.06281EPSS
Exploits0References3
OSV
OSV
added 2024/11/22 8:15 p.m.1 views

CVE-2023-51641

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

6.3CVSS6.2AI score0.06281EPSS
Exploits0References2
CVE
CVE
added 2024/11/22 8:5 p.m.43 views

CVE-2024-5579

The CVE-2024-5579 entry describes Allegra’s renderFieldMatch deserialization as a remote code execution vulnerability. It stems from improper validation of user-supplied data, allowing deserialization of untrusted data and enabling code execution in the context of LOCAL SERVICE. The advisory note...

7.2CVSS7.5AI score0.11007EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.10 views

CVE-2024-5579 Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS8AI score0.11007EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.18 views

CVE-2024-5579 Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability

Allegra renderFieldMatch Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this vulnerability. The specific flaw exists within the...

7.2CVSS0.11007EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/11/22 8:5 p.m.13 views

CVE-2023-51641 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

9.8CVSS0.06281EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/11/22 8:5 p.m.15 views

CVE-2023-51641 Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a...

9.8CVSS9.9AI score0.06281EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/22 12:0 a.m.2 views

Allegra 代码问题漏洞

Allegra is a project management software for mid-sized organizations from Allegra. A code issue vulnerability exists in Allegra that stems from the renderFieldMatch feature containing an untrusted data deserialization remote code execution vulnerability...

9.8CVSS9.8AI score0.06281EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/08/22 12:0 a.m.3 views

PT-2024-36586 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Allegra. Authentication is required to exploit this issue. The specific flaw exists within the...

7.2CVSS7.7AI score0.11007EPSS
Exploits0References5
Zero Day Initiative
Zero Day Initiative
added 2024/02/09 12:0 a.m.13 views

Allegra renderFieldMatch Deserialization of Unstrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Allegra. Although authentication is required to exploit this vulnerability, product implements a registration mechanism that can be used to create a user with a sufficient privilege level. The specif...

9.8CVSS7.9AI score0.06281EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/02/09 12:0 a.m.1 views

PT-2024-19456 · Allegra · Allegra

Name of the Vulnerable Software and Affected Versions: Allegra affected versions not specified Description: The issue concerns a remote code execution vulnerability due to the deserialization of untrusted data in the renderFieldMatch function. Recommendations: At the moment, there is no informati...

7.6AI score
Exploits0References1
Rows per page
Query Builder