Lucene search
+L

7908 matches found

EUVD
EUVD
added 2026/06/09 6:30 p.m.35 views

EUVD-2026-35530

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.01914EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/09 5:17 p.m.29 views

CVE-2026-45484

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.35216EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/09 5:17 p.m.17 views

CVE-2026-42599

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

6.1CVSS0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/09 5:17 p.m.20 views

CVE-2026-26142

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network...

9.8CVSS0.01914EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 5:05 p.m.76 views

CVE-2026-45484

This CVE involves deserialization of untrusted data in Microsoft Office SharePoint, enabling an authorized attacker to elevate privileges over a network. Affected component: SharePoint (deserialization vulnerability cited in multiple sources). Root cause: improper handling of deserialized input l...

8.8CVSS5.5AI score0.35216EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/06/09 5:05 p.m.20 views

EUVD-2026-35581

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

8.8CVSS7.1AI score0.35216EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/09 5:05 p.m.162 views

CVE-2026-26142

CVE-2026-26142 affects Nuance PowerScribe. The issue is a deserialization of untrusted data in PowerScribe that allows an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability’s CVSSv3.1 metrics indicate NETWORK access, low attack complexity, and no pr...

9.8CVSS5.7AI score0.01914EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2026/06/09 4:22 p.m.45 views

CVE-2026-42599 Cross-site scripting via spread attributes in Svelte SSR

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

5CVSS0.00205EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/06/09 4:22 p.m.12 views

CVE-2026-42599 Cross-site scripting via spread attributes in Svelte SSR

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

5CVSS5.5AI score0.00205EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/09 4:22 p.m.14 views

CVE-2026-42599 Cross-site scripting via spread attributes in Svelte SSR

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

5CVSS6AI score
SaveExploits0References4
EUVD
EUVD
added 2026/06/09 4:22 p.m.20 views

EUVD-2026-35703

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

5CVSS5.5AI score0.00205EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/09 4:22 p.m.101 views

CVE-2026-42599

CVE-2026-42599 affects Svelte SSR. Prior to version 5.55.7, using spread syntax to render attributes from untrusted data may include event handler properties in the rendered HTML, enabling attackers to inject malicious event handlers that run in victims’ browsers if JavaScript is enabled and hydr...

6.1CVSS5.5AI score0.00205EPSS
SaveExploits0References2Affected Software1
Microsoft CVE
Microsoft CVE
added 2026/06/09 2:00 p.m.22 views

Nuance PowerScribe Remote Code Execution Vulnerability

Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network...

9.8CVSS5.7AI score0.01914EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/09 12:33 a.m.20 views

EUVD-2026-35202

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal state and perform out-of-bounds writes to a stack buffer...

8.2CVSS5.4AI score0.0068EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.18 views

PT-2026-47966

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to elevate privileges over a network, which can subsequently affect the system. Deserialization is the...

9CVSS7AI score0.35216EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/09 12:00 a.m.31 views

PT-2026-47875

Svelte is a performance oriented web framework. Prior to version 5.55.7, when using spread syntax to render attributes from untrusted data, event handler properties are included in the rendered HTML output. If an application spreads user-controlled or external data as element attributes, an...

5CVSS5.5AI score0.00205EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/06/09 12:00 a.m.30 views

Svelte 跨站脚本漏洞

Svelte is an open-source approach to building web applications. Versions of Svelte prior to 5.55.7 contained a cross-site scripting vulnerability. This vulnerability stemmed from the use of extended syntax for rendering untrusted data, causing event handling properties to be included in the HTML...

6.1CVSS4.9AI score0.00205EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/09 12:00 a.m.11 views

Deserialization of Untrusted Data

Overview org.springframework.pulsar:spring-pulsar is a Spring Pulsar Core Affected versions of this package are vulnerable to Deserialization of Untrusted Data via trusted package validation in JsonPulsarHeaderMapper. An attacker can trigger deserialization of unintended classes by supplying...

9.2CVSS5.7AI score0.00347EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2026/06/09 12:00 a.m.18 views

NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.9AI score0.00416EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/09 12:00 a.m.12 views

Deserialization of Untrusted Data

Overview org.springframework.security:spring-security-saml2-service-provider is a security component for the Spring Framework. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via deserialization of credential data stored in JdbcAssertingPartyMetadataRepositor...

7.3CVSS6.1AI score0.00198EPSS
SaveExploits0References2
Rows per page
Query Builder