Deserialization of Untrusted Data

Overview mlrun is a Tracking and config of machine learning runs Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the importfunctiontodict function in the run.py file. Details Serialization is a process of converting an object into a sequence of bytes whic...

CVE-2023-38891

SQL injection vulnerability in Vtiger CRM v.7.5.0 allows a remote authenticated attacker to escalate privileges via the getQueryColumnsList function in ReportRun.php...

PT-2018-18928

Name of the Vulnerable Software and Affected Versions PGObject::Util::DBAdmin module versions prior to 0.120.0 LedgerSMB versions 1.5.x and earlier Description The issue arises from insufficient sanitization or escaping of variable values used in shell command execution. This results in shell cod...