CVE-2023-35815

LOW Year: 2023
CVSS v3 Score
3.5
Low
Weakness Type
CWE-502
View all →

Vulnerability Description

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.

Related Vulnerabilities

CVE-2023-35814

LOW
CVSS:3.5(Low)

DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.

CWE-5022023

CVE-2022-29615

LOW
CVSS:3.4(Low)

SAP NetWeaver Developer Studio (NWDS) - version 7.50, is based on Eclipse, which contains the logging framework log4j in version 1.x. The application's confidentiality and integrity could have a low i...

CWE-5022022

CVE-2024-3568

LOW
CVSS:3.4(Low)

The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class...

CWE-5022024

CVE-2020-2756

LOW
CVSS:3.7(Low)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u...

CWE-5022020

CVE-2020-2757

LOW
CVSS:3.7(Low)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u...

CWE-5022020

CVE-2024-21217

LOW
CVSS:3.7(Low)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Jav...

CWE-5022024