2143 matches found
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 XML-RPC request are vulnerable to unsafe deseria...
Remote Code Execution
apache dubbo is vulnerable to remote code execution. Unsafe deserialization allows an attacker to execute arbitrary code through arbitrary constructors by submitting malicious YAML rules...
XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue
A flaw was found in xstream. A remote attacker can load and execute arbitrary code from a remote host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator
A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet
A flaw was found in xstream. A remote attacker may be able to load and execute arbitrary code from a remote host only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry
A flaw was found in xstream. A remote attacker, who has sufficient rights, can execute commands of the host by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Critical: Red Hat Security Advisory: Red Hat Data Grid 8.2.0 security update
A security update for Red Hat Data Grid is now available. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links i...
XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader
A flaw was found in xstream. A remote attacker may be able to execute arbitrary code only by manipulating the processed input stream. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
Emissary Code Execution Vulnerability
Emissary is a software application. A P2P-based data-driven workflow engine that runs on heterogeneous and potentially widely distributed multi-tier P2P network computing resources. A code execution vulnerability in Emissary version 6.4.0, which originates from an unsafe deserialization of an...
CVE-2021-32634
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the WorkSpaceClientEnqueue.action REST endpoint. This issue may lead to post-auth Remote Code Execution. This issue has been patched in...
CVE-2021-32634
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the WorkSpaceClientEnqueue.action REST endpoint. This issue may lead to post-auth Remote Code Execution. This issue has been patched in...
Remote code execution
Emissary is a distributed, peer-to-peer, data-driven workflow framework. Emissary 6.4.0 is vulnerable to Unsafe Deserialization of post-authenticated requests to the WorkSpaceClientEnqueue.action REST endpoint. This issue may lead to post-auth Remote Code Execution. This issue has been patched in...
CVE-2021-32634
Emissary (v6.4.0) is vulnerable to Unsafe Deserialization of post-authenticated requests to the WorkSpaceClientEnqueue.action endpoint, enabling post-auth remote code execution. The issue stems from deserializing untrusted data in a REST call and has been patched in v6.5.0. As a mitigation, a wor...
Emissary 代码问题漏洞
Emissary is a software application. A P2P-based data-driven workflow engine that runs on heterogeneous and potentially widely distributed multi-tier P2P network computing resources. A code execution vulnerability in Emissary version 6.4.0, which originates from an unsafe deserialization of an...
Exploit for Deserialization of Untrusted Data in Apache Ofbiz
CVE-2020-9496 - RCE Because the 2 xmlrpc related requets in we...
CentOS: Security Advisory for xstream (CESA-2021:1354)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CentOS 7 : xstream (RHSA-2021:1354)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1354 advisory. - XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a...
CVE-2021-29200
Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack...