CVE-2024-9953

A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8. An authenticated administrative user can inject an arbitrary pickle object into a user’s profile, which may lead to a DoS condition when the profile is accessed. While the Django server restricts unpickling to prevent server crashes, this vulnerability could still disrupt operations.

• CWE-502
• CWE-502

• https://github.com/CERTCC/VINCE/issues?q=label%3AsecurityPatch

Published

Oct 14, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-9946The Social Share, Social Login and Social Comments Plugin – …8.1
• CVE-2024-9947The ProfilePress Pro plugin for WordPress is vulnerable to a…9.8
• CVE-2024-9949Denial of Service in Forescout SecureConnector 11.1.02.1019 …6.1
• CVE-2024-9950A vulnerability in Forescout SecureConnector v11.3.07.0109 o…7.8
• CVE-2024-9951The WP Photo Album Plus plugin for WordPress is vulnerable t…6.1
• CVE-2024-9952A vulnerability was found in SourceCodester Online Eyewear S…4.8
• CVE-2024-9954Use after free in AI in Google Chrome prior to 130.0.6723.58…8.8
• CVE-2024-9955Use after free in WebAuthentication in Google Chrome prior t…8.8
• CVE-2024-9956Inappropriate implementation in WebAuthentication in Google …7.8
• CVE-2024-9957Use after free in UI in Google Chrome on iOS prior to 130.0.…8.8
• CVE-2024-9958Inappropriate implementation in PictureInPicture in Google C…4.3
• CVE-2024-9959Use after free in DevTools in Google Chrome prior to 130.0.6…8.8