Falhas do tipo CWE-502

2.283 resultados
CVE-2025-47584HIGHWordPress Photography theme <= 7.5.2 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2022-2465HIGHISaGRAF Workbench Deserialization of Untrusted Data CWE-502EPSS 0.3%CVE-2026-22248HIGHGLPI affected by Remote Code Execution via malicious uploadEPSS 0.3%CVE-2025-14929HIGHHugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.3%CVE-2025-14922HIGHHugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.3%CVE-2026-7597MEDIUMmem0ai mem0 faiss.py pickle.dump deserializationEPSS 0.3%CVE-2025-46183HIGHThe Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources. If an attacker provides a speciallyEPSS 0.3%CVE-2023-1145HIGH Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the DeviEPSS 0.3%CVE-2024-37502MEDIUMWordPress Social Login plugin <= 2.6.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2024-33641MEDIUMWordPress Custom field finder plugin <= 0.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-60231CRITICALWordPress The Hospital theme <= 1.8.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-60236CRITICALWordPress Creatify theme <= 1.5 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-24165HIGHNVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data. A successful exploit of this vulnerabiEPSS 0.3%CVE-2026-2555LOWJeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserializationEPSS 0.3%CVE-2021-4178—A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly EPSS 0.3%CVE-2026-56037HIGHWordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-39556HIGHWordPress Konsept theme <= 1.9 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40752HIGHWordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-39443HIGHWordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-27369HIGHWordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerabilityEPSS 0.3%