CWE-502 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-502/ Sun, 26 Feb 2023 09:05:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-502 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-502/ 32 32 CVE-2007-1701 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1701/ Sun, 26 Feb 2023 09:05:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1701/ PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with “_SESSION|s:39:”.

The post CVE-2007-1701 appeared first on CVE Vulnerability.

]]> PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with “_SESSION|s:39:”.

The post CVE-2007-1701 appeared first on CVE Vulnerability.

]]> CVE-2018-9843 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9843/ Sun, 26 Feb 2023 06:51:52 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9843/ The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.

The post CVE-2018-9843 appeared first on CVE Vulnerability.

]]> The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a serialized .NET object in an Authorization HTTP header.

The post CVE-2018-9843 appeared first on CVE Vulnerability.

]]> CVE-2018-8349 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8349/ Sun, 26 Feb 2023 06:51:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8349/ A remote code execution vulnerability exists in “Microsoft COM for Windows” when it fails to properly handle serialized objects, aka “Microsoft COM for Windows Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows […]

The post CVE-2018-8349 appeared first on CVE Vulnerability.

]]> A remote code execution vulnerability exists in “Microsoft COM for Windows” when it fails to properly handle serialized objects, aka “Microsoft COM for Windows Remote Code Execution Vulnerability.” This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers.

The post CVE-2018-8349 appeared first on CVE Vulnerability.

]]> CVE-2018-8013 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8013/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8013/ In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

The post CVE-2018-8013 appeared first on CVE Vulnerability.

]]> In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.

The post CVE-2018-8013 appeared first on CVE Vulnerability.

]]> CVE-2018-8018 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8018/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8018/ In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a […]

The post CVE-2018-8018 appeared first on CVE Vulnerability.

]]> In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to GridClientJdkMarshaller deserialization endpoint.

The post CVE-2018-8018 appeared first on CVE Vulnerability.

]]> CVE-2018-8021 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8021/ Sun, 26 Feb 2023 06:51:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8021/ Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.

The post CVE-2018-8021 appeared first on CVE Vulnerability.

]]> Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.

The post CVE-2018-8021 appeared first on CVE Vulnerability.

]]> CVE-2018-7889 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7889/ Sun, 26 Feb 2023 06:51:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7889/ gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

The post CVE-2018-7889 appeared first on CVE Vulnerability.

]]> gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

The post CVE-2018-7889 appeared first on CVE Vulnerability.

]]> CVE-2018-7891 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7891/ Sun, 26 Feb 2023 06:51:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7891/ The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution.

The post CVE-2018-7891 appeared first on CVE Vulnerability.

]]> The Milestone XProtect Video Management Software (Corporate, Expert, Professional+, Express+, Essential+) 2016 R1 (10.0.a) to 2018 R1 (12.1a) contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution.

The post CVE-2018-7891 appeared first on CVE Vulnerability.

]]> CVE-2018-7529 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7529/ Sun, 26 Feb 2023 06:51:04 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7529/ A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.

The post CVE-2018-7529 appeared first on CVE Vulnerability.

]]> A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.

The post CVE-2018-7529 appeared first on CVE Vulnerability.

]]> CVE-2018-7489 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-7489/ Sun, 26 Feb 2023 06:51:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-7489/ FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in […]

The post CVE-2018-7489 appeared first on CVE Vulnerability.

]]> FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.

The post CVE-2018-7489 appeared first on CVE Vulnerability.

]]>