CWE-502

Deserialization vulnerability of untrusted data in the ability module. Impact: Successful exploitation of this vulnerabi

Issue of inconsistent read/write serialization in the ad module. Impact: Successful exploitation of this vulnerability m

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cau

ParcelMismatch vulnerability in attribute deserialization. Impact: Successful exploitation of this vulnerability may cau

A flaw has been found in ILIAS up to 8.23/9.13/10.1. Affected by this issue is the function unserialize of the component

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.Th

A flaw was found in the Keycloak LDAP User Federation provider. This vulnerability allows an authenticated realm adminis

There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of

A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the functio

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affect

A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the f

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classi

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the

A vulnerability in the file opening process of Cisco Unified Contact Center Express (Unified CCX) Editor could allow an

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0

A potential security vulnerability has been identified in the Poly Clariti Manager for versions prior to 10.12.1. The vu

A vulnerability was determined in MaxD Lightning Module 4.43/4.44 on OpenCart. This issue affects some unknown processin

A vulnerability was found in Antabot White-Jotter 0.22. It has been declared as critical. This vulnerability affects the

A security vulnerability has been detected in tiny-rdm Tiny RDM up to 1.2.5. Affected by this vulnerability is the funct

A vulnerability has been found in Dromara Sa-Token up to 1.44.0. This issue affects the function ObjectInputStream.readO

A vulnerability has been found in y_project RuoYi up to 4.8.0 and classified as critical. This vulnerability affects the

A vulnerability, which was classified as problematic, has been found in westboy CicadasCMS 1.0. This issue affects some

A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unk

A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown proces

A vulnerability, which was classified as problematic, has been found in elunez eladmin up to 2.7. Affected by this issue

Deserialization of Untrusted Data vulnerability in Drupal Monster Menus allows Object Injection.This issue affects Monst

A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is so

A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker

A weakness has been identified in nutzam NutzBoot up to 2.6.0-SNAPSHOT. This affects the function getInputStream of the

DevExpress before 23.1.3 does not properly protect XtraReport serialized data in ASP.NET web forms.

DevExpress before 23.1.3 has a data-source protection mechanism bypass during deserialization on XML data.

A flaw has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI

A weakness has been identified in Dromara Sa-Token up to 1.44.0. This affects the function ObjectInputStream.readObject

DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and belo

A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS,

PixelYourSite - Your smart PIXEL (TAG) and API Manager 10.1.1.1 was found to be vulnerable. Unvalidated user input is us

The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the expl

Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175b

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. Versions 8.0.0-BETA3 prior to 8.3.1 contain a vulne

Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version

PowSyBl (Power System Blocks) is a framework to build power system oriented software. In versions 6.3.0 to 6.7.1, there

A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24, 6.7.13, 7.5.2.5, 7.6.2.2, and 7.7.1.0

Kaleris NAVIS N4 ULC (Ultra Light Client) contains an unsafe Java deserialization vulnerability. An unauthenticated atta

A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handli