Lucene search
K

88 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 12:50 p.m.11 views

CVE-2024-43383

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.1CVSS7.6AI score0.04731EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/10/31 12:30 p.m.24 views

Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.1CVSS7.7AI score0.04731EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/10/31 12:30 p.m.11 views

GHSA-2QW8-PPR5-M96C Apache Lucene.Net.Replicator Deserialization of Untrusted Data vulnerability

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.6CVSS8.2AI score0.04731EPSS
Exploits0References5
Snyk
Snyk
added 2024/10/31 10:41 a.m.6 views

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data allowing an attacker to execute arbitrary code or gain unauthorized access by intercepting traffic between a replication client and server or controlling the target replication node URL. Details...

8.6CVSS7.9AI score0.04731EPSS
Exploits0References2
NVD
NVD
added 2024/10/31 10:15 a.m.14 views

CVE-2024-43383

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8.1CVSS0.04731EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/10/31 9:57 a.m.17 views

CVE-2024-43383 Apache Lucene.Net.Replicator: Remote Code Execution in Lucene.Net.Replicator

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's Replicator library: from 4.8.0-beta00005 through 4.8.0-beta00016. An attacker that can intercept traffic between a replication client and server, or control the target replicati...

8CVSS0.04731EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/08 12:0 a.m.4 views

PT-2024-7646 · Apache · Apache Lucene.Net.Replicator

Name of the Vulnerable Software and Affected Versions: Apache Lucene.Net.Replicator versions 4.8.0-beta00005 through 4.8.0-beta00016 Description: This issue is related to the deserialization of untrusted data, which can result in remote code execution or other potential unauthorized access. An...

8.6CVSS8.2AI score0.04731EPSS
Exploits0References25
Github Security Blog
Github Security Blog
added 2024/09/30 9:30 a.m.23 views

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.

This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The...

8CVSS6.1AI score0.0004EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/09/30 9:30 a.m.12 views

GHSA-G643-XQ6W-R67C Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.

This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The...

5.1CVSS6.3AI score0.0004EPSS
Exploits0References4
NVD
NVD
added 2024/09/30 9:15 a.m.14 views

CVE-2024-45772

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

8CVSS0.0004EPSS
Exploits0References2
OSV
OSV
added 2024/09/30 9:15 a.m.1 views

CVE-2024-45772

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

8CVSS5.8AI score0.0004EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/30 8:51 a.m.19 views

CVE-2024-45772 Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

5.1CVSS0.0004EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/09/30 8:51 a.m.17 views

CVE-2024-45772 Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

5.1CVSS6.4AI score0.0004EPSS
Exploits0References1
CVE
CVE
added 2024/09/30 8:51 a.m.77 views

CVE-2024-45772

CVE-2024-45772 (Apache Lucene Replicator) : A deserialization of untrusted data vulnerability affects Lucene Replicator in versions 4.4.0 through before 9.12.0; the deprecated org.apache.lucene.replicator.http package is affected, while org.apache.lucene.replicator.nrt is not. The issue can be tr...

8CVSS5.6AI score0.0004EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/12/15 9:30 p.m.17 views

GHSA-HW46-VG6W-88FJ replicator vulnerable to Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.6AI score0.01865EPSS
Exploits1References6
Github Security Blog
Github Security Blog
added 2022/12/15 9:30 p.m.21 views

replicator vulnerable to Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.3AI score0.01865EPSS
Exploits1References6Affected Software1
NVD
NVD
added 2022/12/15 7:15 p.m.9 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS0.01865EPSS
Exploits1References4
OSV
OSV
added 2022/12/15 7:15 p.m.8 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.6AI score
Exploits0References4
Prion
Prion
added 2022/12/15 7:15 p.m.10 views

Deserialization of untrusted data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

7.5CVSS9.6AI score0.01865EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2022/12/15 12:0 a.m.2 views

replicator 代码问题漏洞

replicator is an advanced JavaScript object serialization library by the individual developer Ivan Nikulin. A security vulnerability exists in replicator versions prior to 1.0.4. An attacker could exploit this vulnerability to execute arbitrary code via the fromSerializable function in a TypedArr...

9.8CVSS8.8AI score0.01865EPSS
Exploits1References5
Rows per page
Query Builder