CWE-915 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-915/ Sun, 26 Feb 2023 09:11:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-915 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-915/ 32 32 CVE-2008-7310 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7310/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7310/ Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model’s attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a “mass assignment” vulnerability.

The post CVE-2008-7310 appeared first on CVE Vulnerability.

]]> Spree 0.2.0 does not properly restrict the use of a hash to provide values for a model’s attributes, which allows remote attackers to set the Order state value and bypass the intended payment step via a modified URL, related to a “mass assignment” vulnerability.

The post CVE-2008-7310 appeared first on CVE Vulnerability.

]]> CVE-2008-1013 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1013/ Sun, 26 Feb 2023 09:08:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1013/ Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

The post CVE-2008-1013 appeared first on CVE Vulnerability.

]]> Apple QuickTime before 7.4.5 enables deserialization of QTJava objects by untrusted Java applets, which allows remote attackers to execute arbitrary code via a crafted applet.

The post CVE-2008-1013 appeared first on CVE Vulnerability.

]]> CVE-2007-5741 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-5741/ Sun, 26 Feb 2023 09:07:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-5741/ Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

The post CVE-2007-5741 appeared first on CVE Vulnerability.

]]> Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes.

The post CVE-2007-5741 appeared first on CVE Vulnerability.

]]> CVE-2019-9057 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9057/ Sun, 26 Feb 2023 06:34:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9057/ An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.

The post CVE-2019-9057 appeared first on CVE Vulnerability.

]]> An issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to reach an unserialize call with an untrusted parameter, and achieve authenticated object injection.

The post CVE-2019-9057 appeared first on CVE Vulnerability.

]]>