CWE-502

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing

Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) a

Deserialization of Untrusted Data vulnerability in ThemeGoods Photography photography allows Object Injection.This issue

Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remote code execution vulnerabilit

NVIDIA Isaac Lab contains a deserialization vulnerability. A successful exploit of this vulnerability might lead to cod

The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_

An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, d

The String locator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.6.

Deserialization of Untrusted Data vulnerability in reputeinfosystems ARPrice arprice allows Object Injection.This issue

Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on th

Deserialization of Untrusted Data vulnerability in magepeopleteam Taxi Booking Manager for WooCommerce ecab-taxi-booking

Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to

IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 is vulnerable to unrestricted deserializat

Deserialization of Untrusted Data vulnerability in Stiofan Events Calendar for GeoDirectory events-for-geodirectory allo

Deserialization of Untrusted Data vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communiti

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-

A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt

A vulnerability allowing remote code execution (RCE) for domain users.

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to PHP Object Injection in al

Jooby is a web framework for Java and Kotlin. The pac4j io.jooby.internal.pac4j.SessionStoreImpl#get module deserializes

Deserialization of Untrusted Data vulnerability in MDJM Mobile DJ Manager mobile-dj-manager allows Object Injection.This

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnera

Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly tour-booking-manager allows Object Injectio

Deserialization of Untrusted Data vulnerability in PickPlugins Testimonial Slider testimonial allows Object Injection.Th

Deserialization of Untrusted Data vulnerability in magepeopleteam WpEvently mage-eventpress allows Object Injection.This

Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue a

Deserialization of Untrusted Data vulnerability in PickPlugins Job Board Manager job-board-manager allows Object Injecti

Deserialization of untrusted data issue exists in BizRobo! all versions. If this vulnerability is exploited, an arbitrar

Deserialization of Untrusted Data vulnerability in TuriTop TuriTop Booking System turitop-booking-system allows Object I

Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer question-answer allows Object Injection.T

Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects

Deserialization of Untrusted Data vulnerability in WPSpeedo Team Members wps-team allows Object Injection.This issue aff

Deserialization of Untrusted Data vulnerability in bestweblayout Rating by BestWebSoft rating-bws allows Object Injectio

GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attac

NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data vali

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.Th

Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue a

Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This

Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This

Deserialization of Untrusted Data vulnerability in teastudio.pl WP Posts Carousel wp-posts-carousel allows Object Inject

A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the clus

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentic

Deserialization of Untrusted Data vulnerability in uxper Sala allows Object Injection. This issue affects Sala: from n/a

Deserialization of Untrusted Data vulnerability in uxper Nuss nuss allows Object Injection.This issue affects Nuss: from