Lucene search
+L

125 matches found

OSV
OSV
•added 2024/09/30 9:30 a.m.•31 views

GHSA-G643-XQ6W-R67C Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator.

This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users are recommended to upgrade to version 9.12.0, which fixes the issue. The...

5.1CVSS6.3AI score0.00582EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/30 9:15 a.m.•12 views

CVE-2024-45772

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

8CVSS5.8AI score0.00582EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/30 9:15 a.m.•72 views

CVE-2024-45772

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

8CVSS0.00582EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/09/30 8:51 a.m.•68 views

CVE-2024-45772 Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

5.1CVSS0.00582EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/09/30 8:51 a.m.•21 views

CVE-2024-45772 Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

5.1CVSS6.4AI score0.00582EPSS
SaveExploits0References1
CVE
CVE
•added 2024/09/30 8:51 a.m.•120 views

CVE-2024-45772

CVE-2024-45772 (Apache Lucene Replicator) : A deserialization of untrusted data vulnerability affects Lucene Replicator in versions 4.4.0 through before 9.12.0; the deprecated org.apache.lucene.replicator.http package is affected, while org.apache.lucene.replicator.nrt is not. The issue can be tr...

8CVSS5.6AI score0.00582EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/30 12:00 a.m.•1 views

CVE-2024-45772: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Apache Lucene Replicator. This issue affects Apache Lucene's replicator module: from 4.4.0 before 9.12.0. The deprecated org.apache.lucene.replicator.http package is affected. The org.apache.lucene.replicator.nrt package is not affected. Users ar...

8CVSS5.8AI score0.00582EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2022/12/15 9:30 p.m.•35 views

replicator vulnerable to Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.3AI score0.01653EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2022/12/15 9:30 p.m.•52 views

GHSA-HW46-VG6W-88FJ replicator vulnerable to Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.6AI score0.01653EPSS
SaveExploits1References6
OSV
OSV
•added 2022/12/15 7:15 p.m.•18 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS9.6AI score
SaveExploits0References4
NVD
NVD
•added 2022/12/15 7:15 p.m.•34 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS0.01653EPSS
SaveExploits1References4
Prion
Prion
•added 2022/12/15 7:15 p.m.•29 views

Deserialization of untrusted data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

7.5CVSS9.6AI score0.01653EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2022/12/15 12:00 a.m.•7 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

7.8AI score0.01653EPSS
SaveExploits1References4
CVE
CVE
•added 2022/12/15 12:00 a.m.•88 views

CVE-2021-33420

The CVE-2021-33420 issue affects the inikulin replicator prior to 1.0.4, where deserialization in the TypedArray fromSerializable function allows remote attackers to execute arbitrary code. Impact is described as remote code execution with high severity; versions before 1.0.4 are vulnerable. Reme...

9.8CVSS9.6AI score0.01653EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•2 views

CVE-2021-33420: Deserialization of Untrusted Data

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8CVSS6.2AI score0.01653EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/12/15 12:00 a.m.•17 views

replicator 代码问题漏洞

replicator is an advanced JavaScript object serialization library by the individual developer Ivan Nikulin. A security vulnerability exists in replicator versions prior to 1.0.4. An attacker could exploit this vulnerability to execute arbitrary code via the fromSerializable function in a TypedArr...

9.8CVSS8.8AI score0.01653EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/12/15 12:00 a.m.•15 views

PT-2022-10232 · Unknown · Inikulin Replicator

Name of the Vulnerable Software and Affected Versions: inikulin replicator versions prior to 1.0.4 Description: A deserialization issue in the inikulin replicator allows remote attackers to run arbitrary code via the fromSerializable function in the TypedArray object. Recommendations: For version...

9.8CVSS7.9AI score0.01653EPSS
SaveExploits1References10
Cvelist
Cvelist
•added 2022/12/15 12:00 a.m.•44 views

CVE-2021-33420

A deserialization issue discovered in inikulin replicator before 1.0.4 allows remote attackers to run arbitrary code via the fromSerializable function in TypedArray object...

9.8AI score0.01653EPSS
SaveExploits1References4
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:16 p.m.•7 views

Malicious code in event-replicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd2f30db3df7a66c96fc03ca1a15c8f6c60caafe6654cf1dec1d3d2ebea4a43a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:16 p.m.•12 views

MAL-2022-2893 Malicious code in event-replicator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd2f30db3df7a66c96fc03ca1a15c8f6c60caafe6654cf1dec1d3d2ebea4a43a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder