4 matches found
CVE-2024-36610
CVE-2024-36610 is associated with Symfony’s VarDumper deserialization issue in the Stub class, reportedly allowing crafted serialized data to trigger code execution. The primary public entries treat the candidate as withdrawn/invalid (e.g., advisories and sources noting withdrawal or removal). A ...
CVE-2024-36610
...
CVE-2018-13448
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...
CVE-2002-1696
The CVE concerns Microsoft Outlook plug-in PGP 7.0, 7.0.3, and 7.0.4. When the user replies to an encrypted message with the option “Automatically decrypt/verify when opening messages” enabled and “Always use Secure Viewer when decrypting” disabled, a decrypted copy of the message is silently sav...