167 matches found
CVE-2016-2170
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
Design/Logic Flaw
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-2170
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
PT-2016-5045
Name of the Vulnerable Software and Affected Versions Apache OFBiz versions 12.04.x through 12.04.05 Apache OFBiz versions 13.07.x through 13.07.02 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons...
CVE-2016-2170: Improper Input Validation
Apache OFBiz 12.04.x before 12.04.06 and 13.07.x before 13.07.03 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-2000
HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...
PT-2016-1644
Name of the Vulnerable Software and Affected Versions HPE Asset Manager versions 9.40 through 9.50 Asset Manager CloudSystem Chargeback version 9.40 Description The issue is related to incorrect data processing, allowing a remote attacker to execute arbitrary commands using a specially crafted...
CVE-2016-1997
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-1997
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-1998: Improper Input Validation
HPE Service Manager SM 9.3x before 9.35 P4 and 9.4x before 9.41.P2 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
PT-2016-4952
Name of the Vulnerable Software and Affected Versions HPE Service Manager SM versions 9.3x through 9.35 P3 and versions 9.4x through 9.41 P1 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections...
CVE-2016-1997: Improper Input Validation
HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
PT-2016-4951
Name of the Vulnerable Software and Affected Versions HPE Operations Orchestration versions 10.x before 10.51 HPE Operations Orchestration content versions before 1.7.0 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the...
CVE-2016-1986
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-1986
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
PT-2016-4944
Name of the Vulnerable Software and Affected Versions HP Continuous Delivery Automation CDA version 1.30 Description The issue allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. Recommendations For HP...
CVE-2016-1986: Improper Control of Generation of Code
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
CVE-2016-0958
Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0 might allow remote attackers to have an unspecified impact via a crafted serialized Java object...