Lucene search
+L

35 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•9 views

Astra Linux - Vulnerability in libgoogle-gson-java

The com.google.code Gson:gson package before version 2.8.9 is vulnerable to deserialization of untrusted data through the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS7.6AI score0.1223EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: google-gson (UTSA-2026-016683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016683 advisory. The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lea...

7.7CVSS7.4AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/05/05 12:13 a.m.•33 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.5AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/04/28 12:20 a.m.•13 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.5AI score0.1223EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2023/11/20 8:15 p.m.•11 views

CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

9.8CVSS6.2AI score0.01458EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/20 12:00 a.m.•17 views

PT-2023-30285 · Publiccms · Publiccms

Name of the Vulnerable Software and Affected Versions: PublicCMS version 4.0.202302.e Description: The issue allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function. This is due to the deserialization of untrusted data. Recommendations: For PublicCMS...

9.8CVSS9.6AI score0.01458EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/20 12:00 a.m.•6 views

CVE-2023-46990: Deserialization of Untrusted Data

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

9.8CVSS8.7AI score0.01458EPSS
SaveExploits1References2
Mend
Mend
•added 2023/11/20 12:00 a.m.•2 views

CVE-2023-46990

Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace function...

9.8CVSS0.01458EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/11/20 12:00 a.m.•17 views

PublicCMS Security Vulnerabilities

PublicCMS is an open source content management system CMS written in Java by PublicCMS China. A security vulnerability exists in PublicCMS version v.4.0.202302.e, which stems from the presence of a deserialization vulnerability. An attacker can exploit the vulnerability to execute arbitrary code...

9.8CVSS7.8AI score0.01458EPSS
SaveExploits1References2
Broadcom
Broadcom
•added 2023/08/29 12:00 a.m.•81 views

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS7.2AI score0.1223EPSS
SaveExploits0Affected Software1
RedHat Linux
RedHat Linux
•added 2023/05/24 5:13 p.m.•30 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/10/06 12:26 p.m.•15 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.5AI score0.1223EPSS
SaveExploits0References4
Mageia
Mageia
•added 2022/09/21 6:15 p.m.•98 views

Updated google-gson packages fix security vulnerability

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks. CVE-2022-25647...

7.7CVSS2.9AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/08/08 7:43 p.m.•7 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/08/04 4:46 a.m.•11 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.5AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/08/03 6:02 p.m.•33 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/08/03 6:01 p.m.•14 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/08/03 6:01 p.m.•29 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2022/06/23 10:41 a.m.•20 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.5AI score0.1223EPSS
SaveExploits0References4
OSV
OSV
•added 2022/05/20 11:04 a.m.•13 views

OESA-2022-1663 google-gson security update

Gson is a Java library that can be used to convert a Java object into its JSON representation. It can also be used to convert a JSON string into an equivalent Java object. Gson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of. There are a few...

7.7CVSS7.1AI score0.1223EPSS
SaveExploits0References2
Rows per page
Query Builder