Vulnerabilities (CVE)

Filtered by CWE-502
Total 1873 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23836 1 Solarwinds 1 Orion Platform 2024-11-21 N/A 7.2 HIGH
SolarWinds Platform version 2022.4.1 was found to be susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to the SolarWinds Web Console to execute arbitrary commands.
CVE-2023-23649 2024-11-21 N/A 8.1 HIGH
Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1.
CVE-2023-23638 1 Apache 1 Dubbo 2024-11-21 N/A 5.0 MEDIUM
A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x version 3.1.5 and prior versions.
CVE-2023-21779 1 Microsoft 1 Visual Studio Code 2024-11-21 N/A 7.8 HIGH
Visual Studio Code Remote Code Execution Vulnerability
CVE-2023-21762 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.0 HIGH
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-21745 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.0 HIGH
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-21744 1 Microsoft 2 Sharepoint Foundation, Sharepoint Server 2024-11-21 N/A 8.8 HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-21713 1 Microsoft 1 Sql Server 2024-11-21 N/A 8.8 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVE-2023-21710 1 Microsoft 1 Exchange Server 2024-11-21 N/A 7.2 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21707 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.8 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21706 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.8 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21703 1 Microsoft 2 Azure Data Box Gateway, Azure Stack Edge 2024-11-21 N/A 6.5 MEDIUM
Azure Data Box Gateway Remote Code Execution Vulnerability
CVE-2023-21568 1 Microsoft 2 Sql Server 2019 Integration Services, Sql Server 2022 Integration Services 2024-11-21 N/A 7.3 HIGH
Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
CVE-2023-21538 2 Fedoraproject, Microsoft 3 Fedora, .net, Powershell 2024-11-21 N/A 7.5 HIGH
.NET Denial of Service Vulnerability
CVE-2023-21529 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.8 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-21209 1 Google 1 Android 2024-11-21 N/A 6.7 MEDIUM
In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262236273
CVE-2023-21205 1 Google 1 Android 2024-11-21 N/A 5.5 MEDIUM
In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262245376
CVE-2023-21124 1 Google 1 Android 2024-11-21 N/A 7.8 HIGH
In run of multiple files, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-265798353
CVE-2023-20853 1 Aenrich 1 A\+hrd 2024-11-21 N/A 9.8 CRITICAL
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
CVE-2023-20852 1 Aenrich 1 A\+hrd 2024-11-21 N/A 9.8 CRITICAL
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.