CWE-502

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce a

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Di

LMDeploy is a toolkit for compressing, deploying, and serving LLMs. Prior to version 0.11.1, an insecure deserialization

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.

Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted Q

Adminer 4.8.1, when using Monolog for logging, allows a Denial of Service (memory consumption) via a crafted serialized

Pdfminer.six is a community maintained fork of the original PDFMiner, a tool for extracting information from PDF documen

LangChain is a framework for building LLM-powered applications. Prior to @langchain/core versions 0.3.80 and 1.1.8, and

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.

Deserialization of Untrusted Data vulnerability in ThemeGoods Photography.This issue affects Photography: from n/a throu

Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerabili

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by a Deserialization of Untrusted Data vulnerabili

skops is a Python library which helps users share and ship their scikit-learn based models. In versions 0.12.0 and below

Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled d

Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvca

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by a Deserialization of Untrusted Data vulnerabili

LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in LLa

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC

The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources. If an attacker

The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, a

Deserialization of Untrusted Data vulnerability in plainware Locatoraid Store Locator locatoraid allows Object Injection

Deserialization of Untrusted Data vulnerability in plainware PlainInventory z-inventory-manager allows Object Injection.

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Inje

The Affiliate Links: WordPress Plugin for Link Cloaking and Link Management plugin for WordPress is vulnerable to PHP Ob

The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to PHP Object Injection in

The WooCommerce Recover Abandoned Cart plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

ScreenConnect versions 25.2.3 and earlier versions may be susceptible to a ViewState code injection attack. ASP.NET Web

The Jupiter X Core plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.8.

A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality of Dell ControlVault3 p

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affe

Deserialization of Untrusted Data vulnerability in emarket-design Employee Directory – Staff Listing & Team Directory Pl

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact wp-easy-contact allows Object Injectio

Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight employee-spotlight allows Object In

Deserialization of Untrusted Data vulnerability in emarket-design WP Ticket Customer Service Software & Support Ticket S

Deserialization of Untrusted Data vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Object I

The Visitor Logic Lite plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,

vLLM is an inference and serving engine for large language models. In a multi-node vLLM deployment using the V0 engine,

Deserialization of Untrusted Data in Samsung DMS(Data Management Server) allows attackers to execute arbitrary code via

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Deserialization of untrusted data in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 S

Microsoft Excel Security Feature Bypass Vulnerability

CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity an

A deserialization of untrusted data vulnerability exists in NI G Web Development Software that may result in arbitrary c

A YAML deserialization vulnerability was found in the Robot Operating System (ROS) 'dynparam', a command-line tool for g

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escal

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally