Lucene search
+L

7896 matches found

ATTACKERKB
ATTACKERKB
added 2025/01/23 12:00 a.m.82 views

CVE-2025-23006

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console AMC and Central Management Console CMC, which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands. Rece...

9.8CVSS7.8AI score0.23432EPSS
SaveIn wildExploits1References3
NVD
NVD
added 2025/01/22 4:15 p.m.29 views

CVE-2025-23914

Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through = 3.1...

9.8CVSS0.00557EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/22 4:15 p.m.11 views

CVE-2024-31903

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS6.1AI score0.00968EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/22 4:08 p.m.10 views

CVE-2024-31903 IBM Sterling B2B Integrator Standard Edition code execution

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS8.8AI score0.00968EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/01/22 4:08 p.m.42 views

CVE-2024-31903 IBM Sterling B2B Integrator Standard Edition code execution

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data...

8.8CVSS0.00968EPSS
SaveExploits1References1
NVD
NVD
added 2025/01/22 3:15 p.m.14 views

CVE-2025-23944

Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects WOOEXIM: from n/a through = 5.0.0...

8.8CVSS0.00683EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/22 3:15 p.m.15 views

CVE-2025-23932

Deserialization of Untrusted Data vulnerability in Marko-M Quick Count quick-count allows Object Injection.This issue affects Quick Count: from n/a through = 3.00...

9.8CVSS0.00731EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.30 views

CVE-2025-23944 WordPress WOOEXIM Plugin <= 5.0.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects WOOEXIM: from n/a through = 5.0.0...

8.8CVSS0.00683EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/22 2:29 p.m.45 views

CVE-2025-23932 WordPress Quick Count Plugin <= 3.00 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Marko-M Quick Count quick-count allows Object Injection.This issue affects Quick Count: from n/a through = 3.00...

9.8CVSS0.00731EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/22 2:29 p.m.76 views

CVE-2025-23932

CVE-2025-23932 corresponds to a PHP object injection via deserialization in the WordPress plugin/theme item named “Quick Count” (notFound Quick Count). The CVE entry shows an unauthenticated remote impact with a high severity, and Red Hat and Wordfence references confirm this is an unauthenticate...

9.8CVSS7.2AI score0.00731EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.9 views

WordPress plugin Muzaara Google Ads Report 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability exists i...

9.8CVSS8.4AI score0.00557EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.13 views

WordPress plugin Quick Count 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...

9.8CVSS8.4AI score0.00731EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.10 views

PT-2025-5193 · Unknown · Muzaara Google Ads Report

Name of the Vulnerable Software and Affected Versions: Muzaara Google Ads Report versions n/a through 3.1 Description: The issue is related to the deserialization of untrusted data, which allows object injection. This problem affects Muzaara Google Ads Report, enabling potential attacks through t...

9.8CVSS9.8AI score0.00557EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/01/22 12:00 a.m.11 views

PT-2025-1256

Name of the Vulnerable Software and Affected Versions SonicWall SMA 1000 Series versions prior to 12.4.3-02854 Description A critical pre-authentication deserialization of untrusted data vulnerability exists in the SMA1000 Appliance Management Console AMC and Central Management Console CMC...

10CVSS10AI score0.23432EPSS
SaveExploits1References185
CNNVD
CNNVD
added 2025/01/22 12:00 a.m.8 views

WordPress plugin WOOEXIM 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

8.8CVSS8.4AI score0.00683EPSS
SaveExploits0References2
NVD
NVD
added 2025/01/21 2:15 p.m.16 views

CVE-2024-49688

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

9.8CVSS0.0046EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/21 2:15 p.m.14 views

CVE-2024-49699

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

8.8CVSS0.00788EPSS
SaveExploits3References1
Vulnrichment
Vulnrichment
added 2025/01/21 1:40 p.m.8 views

CVE-2024-49699 WordPress ARPrice plugin <= 4.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue affects ARPrice: from n/a through = 4.1.3...

8.8CVSS7.2AI score0.00788EPSS
SaveExploits3References1
CVE
CVE
added 2025/01/21 1:40 p.m.66 views

CVE-2024-49699

The CVE-2024-49699 entry refers to a PHP object-injection vulnerability in the WordPress ARPrice plugin. Affected versions are n/a up to 4.0.3 (and related reports mention

8.8CVSS7.2AI score0.00788EPSS
SaveExploits3References1
Positive Technologies
Positive Technologies
added 2025/01/21 12:00 a.m.8 views

PT-2025-2841 · Arprice · Arprice

Name of the Vulnerable Software and Affected Versions: ARPrice versions n/a through 4.0.3 Description: The issue is related to the deserialization of untrusted data, which allows object injection in the ARPrice software. This problem can be exploited via the deserialization of untrusted data,...

9.8CVSS9.8AI score0.0046EPSS
SaveExploits0References6
Rows per page
Query Builder