PT-2022-3569

Name of the Vulnerable Software and Affected Versions Action View tag helpers versions prior to 5.2.7.1 Action View tag helpers versions prior to 6.0.4.8 Action View tag helpers versions prior to 6.1.5.1 Action View tag helpers versions prior to 7.0.2.4 Description A XSS vulnerability exists in...

NVIDIA Jetson 缓冲区错误漏洞

NVIDIA Jetson is an embedded system development module from NVIDIA Corporation. The NVIDIA Jetson Linux Driver Package suffers from a buffer error vulnerability that stems from insufficient validation of untrusted data, which could be exploited by a local attacker to cause a memory buffer overflo...

Deserialization of untrusted data

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile, which could allow unauthenticated attackers to read arbitrary files on server running old version of PHP susceptible to the null byte technique. This could also lead to RCE by using a...

SUSE-SU-2022:1376-1 Security update for mutt

This update for mutt fixes the following issues: - CVE-2022-1328: Fixed an invalid memory access when reading untrusted uuencoded data. This could result in including private memory in replies bsc1198518...

Deserialization of untrusted data

An issue was discovered in MISP before 2.4.158. PHAR deserialization can occur...

CVE-2022-21445: Deserialization of Untrusted Data

Vulnerability in the Oracle Application Development Framework ADF product of Oracle Fusion Middleware component: ADF Faces. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

Deserialization of untrusted data

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

The CVE-2022-27158 entry affects pearweb prior to 1.32, with the root cause being Deserialization of Untrusted Data. According to sources, this vulnerability impacts confidentiality, integrity, and availability (high impact) and is exploitable over the network with low complexity and no authentic...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158

pearweb 1.32 suffers from Deserialization of Untrusted Data...

CVE-2022-27158: Deserialization of Untrusted Data

pearweb 1.32 suffers from Deserialization of Untrusted Data...

pearweb 代码问题漏洞

pearweb is a PHP extension and application repository. A security vulnerability exists in pearweb before 1.32, which stems from deserialization of untrusted data...

CVE-2022-22957

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities CVE-2022-22957 & CVE-2022-22958. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote...

Deserialization of untrusted data

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities CVE-2022-22957 & CVE-2022-22958. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote...

CVE-2019-6834

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

Deserialization of untrusted data

A CWE-502: Deserialization of Untrusted Data vulnerability exists which could allow an attacker to execute arbitrary code on the targeted system with SYSTEM privileges when placing a malicious user to be authenticated for this vulnerability to be successfully exploited. Affected Product: Schneide...

CVE-2022-22957

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain two remote code execution vulnerabilities CVE-2022-22957 & CVE-2022-22958. A malicious actor with administrative access can trigger deserialization of untrusted data through malicious JDBC URI which may result in remote...