CWE-502

NewPipe is an Android app for video streaming written in Java. It supports exporting and importing backups, as a way to

An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pos

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulner

Deserialization of Untrusted Data vulnerability in Live Composer Team Page Builder: Live Composer.This issue affects Pag

Microsoft/Muzic Remote Code Execution Vulnerability

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1213), a code execution attack is possible through an i

Deserialization of Untrusted Data vulnerability in Averta Master Slider.This issue affects Master Slider: from n/a throu

Deserialization of Untrusted Data vulnerability in CodeSolz Better Find and Replace.This issue affects Better Find and R

Apache Hive Metastore (HMS) uses SerializationUtilities#deserializeObjectWithTypeInformation method when filtering and f

Deserialization of Untrusted Data vulnerability in MagePeople Team Event Manager and Tickets Selling Plugin for WooComme

Deserialization of Untrusted Data vulnerability in Social Media Share Buttons By Sygnoos Social Media Share Buttons.This

Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce.This issue aff

Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links

The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up t

Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka b

A security vulnerability has been identified in Bludit, allowing attackers with knowledge of the API token to upload arb

The Advanced Order Export For WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up

A java deserialization vulnerability in HPE Remote Insight Support may allow an unauthenticated attacker to execute code

The Print Science Designer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and includi

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platf

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploite

Deserialization of Untrusted Data vulnerability in StellarWP GiveWP give.This issue affects GiveWP: from n/a through <=

Deserialization of Untrusted Data vulnerability in Timber Team & Contributors Timber.This issue affects Timber: from n/a

The 140+ Widgets | Best Addons For Elementor – FREE for WordPress is vulnerable to PHP Object Injection in versions up t

Deserialization of Untrusted Data vulnerability in Apache Lucene.Net.Replicator. This issue affects Apache Lucene.NET's

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attac

A CWE-502: Deserialization of untrusted data vulnerability exists that could allow an attacker logged in with a user le

Deserialization of Untrusted Data vulnerability in Apache Camel SQL ComponentThis issue affects Apache Camel: from 3.0.0

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution when a malicious

sagemaker-python-sdk is a library for training and deploying machine learning models on Amazon SageMaker. The sagemaker.

A deserialization of untrusted data vulnerability exists in common code used by FlexLogger and InstrumentStudio that may

Microsoft Excel Remote Code Execution Vulnerability

Remote Code Execution has been discovered in OpenText™ iManager 3.2.6.0200. The vulnerability can trigger command inject

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, e

Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, e

Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously

Dell Common Event Enabler, version 8.9.10.0 and prior, contain an insecure deserialization vulnerability in CAVATools. A

There is a vulnerability in AVEVA PI Asset Framework Client that could allow malicious code to execute on the PI System

A vulnerability has been identified in SIMATIC PCS neo V4.0 (All versions), SIMATIC STEP 7 V16 (All versions), SIMATIC S

In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECU

A deserialization of untrusted data vulnerability exists in NI VeriStand that may result in remote code execution. Succ

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously c

A vulnerability in the FAISS.deserialize_from_bytes function of langchain-ai/langchain allows for pickle deserialization

There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to repres

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an in

In Progress Telerik UI for WPF versions prior to 2024 Q3 (2024.3.924), a code execution attack is possible through an in

In Progress Telerik UI for WPF versions prior to 2024 Q4 (2024.4.1111), a code execution attack is possible through an i

In Progress Telerik UI for WinForms versions prior to 2024 Q4 (2024.4.1113), a code execution attack is possible through

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization.

In writeToParcel of MediaPlayer.java, there is a possible serialization/deserialization mismatch due to improper input v