Lucene search
+L

481 matches found

Prion
Prion
added 2021/08/11 11:15 p.m.32 views

Design/Logic Flaw

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

6.5CVSS6.9AI score0.01033EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/11 11:15 p.m.7 views

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

7.2CVSS7.1AI score0.01033EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/08/11 10:55 p.m.56 views

CVE-2021-38585

The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks SEC-585...

7.2AI score0.01033EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/11 10:55 p.m.101 views

CVE-2021-38585

CVE-2021-38585 describes a vulnerability in the WHM Locale Upload feature of cPanel, where versions before 98.0.1 are susceptible to unserialization attacks (SEC-585). The issue stems from an unserialization flaw in the locale upload flow, enabling attackers to potentially exploit the component. ...

7.2CVSS6.9AI score0.01033EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.6 views

SUSE: Security Advisory (SUSE-SU-2016:0228-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2017:2468-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.0742EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/22 4:20 p.m.27 views

GHSA-JH5X-HFHG-78JQ Deserialization of Untrusted Data in Archive_Tar

ArchiveTar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. See: https://github.com/pear/ArchiveTar/issues/33...

7.8CVSS7.8AI score0.84554EPSS
SaveExploits5References14
Github Security Blog
Github Security Blog
added 2021/04/22 4:20 p.m.94 views

Deserialization of Untrusted Data in Archive_Tar

ArchiveTar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. See: https://github.com/pear/ArchiveTar/issues/33...

7.8CVSS7.6AI score0.47493EPSS
SaveExploits2References14Affected Software1
OSV
OSV
added 2021/03/11 1:15 a.m.25 views

CVE-2020-1900

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32....

9.8CVSS6.5AI score
SaveExploits0References2
Prion
Prion
added 2021/03/11 1:15 a.m.25 views

Design/Logic Flaw

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32....

7.5CVSS9.2AI score0.01384EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/11 1:15 a.m.52 views

CVE-2020-1900

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32....

9.8CVSS7.2AI score0.01384EPSS
SaveExploits0References3
OSV
OSV
added 2021/03/11 1:15 a.m.12 views

UBUNTU-CVE-2020-1900

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32....

9.8CVSS5.8AI score0.01384EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/03/11 12:55 a.m.36 views

CVE-2020-1900

When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32....

9.4AI score0.01384EPSS
SaveExploits0References2
CVE
CVE
added 2021/03/11 12:55 a.m.93 views

CVE-2020-1900

HHVM (HipHop VM) has a vulnerability CVE-2020-1900 affecting unserialization of objects with dynamic properties. The issue occurs when HHVM does not pre-reserve the full size of the dynamic property array before inserting into it, causing potential array resizing that can invalidate previously st...

9.8CVSS9.3AI score0.01384EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/03/03 5:15 p.m.14 views

CVE-2021-20076

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution RCE on the Tenable.sc server via Hypertext Preprocessor unserialization...

8.8CVSS7.4AI score0.01985EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/03 5:15 p.m.19 views

CVE-2021-20076

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution RCE on the Tenable.sc server via Hypertext Preprocessor unserialization...

8.8CVSS0.01985EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/03 5:15 p.m.29 views

Remote code execution

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution RCE on the Tenable.sc server via Hypertext Preprocessor unserialization...

6.5CVSS8.9AI score0.01985EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/03/03 5:15 p.m.6 views

CVE-2021-20076

Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution RCE on the Tenable.sc server via Hypertext Preprocessor unserialization...

8.8CVSS7.8AI score0.01985EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2021/03/03 12:00 a.m.66 views

Tenable SecurityCenter 5.13.0 - 5.17.0 Remote Code Execution (TNS-2021-03)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is in the 5.13.0 through 5.17.0 version range. Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated,...

8.8CVSS8.1AI score0.01985EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/02/02 12:00 a.m.19 views

Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1164)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.1AI score0.84554EPSS
SaveExploits5References4
Rows per page
Query Builder