Lucene search
+L

9852 matches found

Github Security Blog
Github Security Blog
•added 2022/01/06 10:13 p.m.•46 views

Deserialization of Untrusted Data in rust-cpuid

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used which is not the the default, a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic...

9.8CVSS2.4AI score0.01123EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/01/06 10:13 p.m.•79 views

GHSA-W428-F65R-H4Q2 Deserialization of Untrusted Data in rust-cpuid

An issue was discovered in the raw-cpuid crate before 9.1.1 for Rust. If the serialize feature is used which is not the the default, a Deserialize operation may lack sufficient validation, leading to memory corruption or a panic...

9.8CVSS9.5AI score0.01123EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/01/06 6:32 p.m.•48 views

AjaxNetProfessional deserializes arbitrary JavaScript objects

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary JavaScript objects. Description Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise...

8.7CVSS5.8AI score0.00824EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2022/01/04 8:05 p.m.•42 views

CVE-2022-21647 Deserialization of Untrusted Data in Codeigniter4

CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the old function in CodeIgniter4. Remote attackers may inject auto-loadable arbitrary objects with this vulnerability, and possibly execute existing PHP code on the server. We are aware of a...

7.7CVSS9.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/04 12:00 a.m.•5 views

CVE-2022-21647: Deserialization of Untrusted Data

CodeIgniter is an open source PHP full-stack web framework. Deserialization of Untrusted Data was found in the old function in CodeIgniter4. Remote attackers may inject auto-loadable arbitrary objects with this vulnerability, and possibly execute existing PHP code on the server. We are aware of a...

9.8CVSS6AI score0.37671EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/04 12:00 a.m.•10 views

PT-2022-15002 · Unknown · Codeigniter4

Name of the Vulnerable Software and Affected Versions: CodeIgniter4 versions prior to 4.1.6 Description: Deserialization of Untrusted Data was found in the old function in CodeIgniter4. Remote attackers may inject auto-loadable arbitrary objects with this vulnerability, and possibly execute...

9.8CVSS9.7AI score0.37671EPSS
SaveExploits0References10
attackerkb
attackerkb
•added 2021/12/23 6:15 p.m.•17 views

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7.2AI score0.00978EPSS
SaveExploits1References3
NVD
NVD
•added 2021/12/23 6:15 p.m.•33 views

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS0.00978EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/23 6:15 p.m.•19 views

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7.5AI score
SaveExploits0References2
Prion
Prion
•added 2021/12/23 6:15 p.m.•22 views

Deserialization of untrusted data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

6.8CVSS7.5AI score0.00978EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2021/12/23 6:15 p.m.•11 views

PYSEC-2021-874

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7AI score0.00978EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/12/23 5:15 p.m.•40 views

CVE-2021-4118 Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS7.8AI score0.00978EPSS
SaveExploits1References2
Mend
Mend
•added 2021/12/23 5:15 p.m.•2 views

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

8.5CVSS0.00978EPSS
SaveExploits1References9
CVE
CVE
•added 2021/12/23 5:15 p.m.•112 views

CVE-2021-4118

CVE-2021-4118 affects pytorch-lightning and is described as a Deserialization of Untrusted Data vulnerability. The CVSS3 data in the records indicates a HIGH impact on confidentiality, integrity, and availability with a LOCAL attack vector, LOW attack complexity, no privileges required, and USER ...

7.8CVSS7.3AI score0.00978EPSS
SaveExploits1References2Affected Software1
Gitee
Gitee
•added 2021/12/23 4:22 p.m.•25 views

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

安全相关的测试 介绍 安全相关的测试,仅供学习! 1.log4j2 CVE-2021-44228漏洞问题复现...

10CVSS8.7AI score0.99999EPSS
SaveExploits383
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•5 views

CVE-2021-4118: Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

7.8CVSS5.8AI score0.00978EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/23 12:00 a.m.•18 views

Pytorch-Lightning 代码问题漏洞

Pytorch-Lightning is an open source lightweight PyTorch wrapper. Used for high-performance Ai research. pytorch-lightning suffers from a code issue vulnerability that stems from the software's tendency to deserialize untrustworthy data, which can be exploited by an attacker to cause code executio...

7.8CVSS6.3AI score0.00978EPSS
SaveExploits1References3
Zero Day Initiative
Zero Day Initiative
•added 2021/12/23 12:00 a.m.•36 views

Veritas Enterprise Vault EVTaskGuardian Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is not required to exploit this vulnerability. The specific flaw exists within EVTaskGuardian.exe. The issue results from the lack of proper validation of...

9.8CVSS3.6AI score0.01873EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/23 12:00 a.m.•37 views

Veritas Enterprise Vault EVStorageQueueBroker Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is not required to exploit this vulnerability. The specific flaw exists within EVStorageQueueBroker.exe. The issue results from the lack of proper validation ...

9.8CVSS3.4AI score0.01873EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/12/23 12:00 a.m.•43 views

Veritas Enterprise Vault EVMonitoring Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Veritas Enterprise Vault. Authentication is not required to exploit this vulnerability. The specific flaw exists within EVMonitoring.exe. The issue results from the lack of proper validation of...

9.8CVSS3.6AI score0.01873EPSS
SaveExploits0References1
Rows per page
Query Builder