MyBatis before 3.5.6 mishandles deserialization of object streams. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. This Deserialization of Untrusted Data vulnerability could allow attackers to execute arbitrary code through malicious serialized objects.
Deserialization
Mybatis
NVD
GitHub
CVSS 3.1
8.1
EPSS
1.8%
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.
Information Disclosure
Monero
NVD
GitHub
CVSS 3.1
7.8
EPSS
0.4%