Fallos del tipo CWE-502
2284 resultadosCVE-2026-24221HIGHNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of EPSS 0.2%CVE-2026-24237HIGHNVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of EPSS 0.2%CVE-2026-24247HIGHNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful explEPSS 0.2%CVE-2025-3677MEDIUMlm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserializationEPSS 0.2%CVE-2026-32506MEDIUMWordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerabilityEPSS 0.2%CVE-2026-32507MEDIUMWordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerabilityEPSS 0.2%CVE-2026-32511MEDIUMWordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerabilityEPSS 0.2%CVE-2026-32508MEDIUMWordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerabilityEPSS 0.2%CVE-2026-32510MEDIUMWordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerabilityEPSS 0.2%CVE-2025-4393MEDIUMMedtronic MyCareLink Patient Monitor Deserialization VulnerabilityEPSS 0.2%CVE-2026-0859MEDIUMTYPO3 CMS Allows Insecure Deserialization via Mailer File SpoolEPSS 0.2%CVE-2026-24240HIGHNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful explEPSS 0.2%CVE-2025-48535HIGHIn assertSafeToStartCustomActivity of AppRestrictionsFragment.java , there is a possible way to exploit a parcel mismatch resulting in a lauEPSS 0.2%CVE-2025-5148MEDIUMFunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserializationEPSS 0.2%CVE-2025-31935MEDIUMSubnet Solutions PowerSYSTEM Center Deserialization of Untrusted DataEPSS 0.2%CVE-2025-20275MEDIUMCisco Unified Contact Center Express Editor Remote Code Execution VulnerabilityEPSS 0.2%CVE-2025-4701MEDIUMVITA-MLLM Freeze-Omni utils.py torch.load deserializationEPSS 0.2%CVE-2025-4742MEDIUMXU-YIJIE grpo-flat grpo_vanilla.py main deserializationEPSS 0.2%CVE-2025-4740MEDIUMBeamCtrl Airiana coef deserializationEPSS 0.2%CVE-2026-24228HIGHNVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploitEPSS 0.2%