Lucene search
+L

5 matches found

NVD
NVD
•added 2021/02/18 6:15 p.m.•41 views

CVE-2021-27335

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...

9.8CVSS0.02999EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/18 6:15 p.m.•30 views

Deserialization of untrusted data

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...

7.5CVSS9.5AI score0.02999EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/02/18 5:51 p.m.•49 views

CVE-2021-27335

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...

9.8AI score0.02999EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/18 12:00 a.m.•10 views

CVE-2021-27335: Deserialization of Untrusted Data

KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter...

9.8CVSS5.8AI score0.02999EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/02/18 12:00 a.m.•12 views

PT-2021-17401

Name of the Vulnerable Software and Affected Versions KollectApps versions prior to 4.8.16c Description The issue is related to insecure Java deserialization, which can lead to Remote Code Execution. This is achieved via a ysoserial.payloads.CommonsCollections parameter. Recommendations For...

9.8CVSS0.02999EPSS
SaveExploits1References5
Rows per page
Query Builder