#cwe-502

共收录 943 条相关情报。

← 返回所有主题
漏洞预警2026-10-10 发布INFO

Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16.

CVE-2026-93929

Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.

CVE-2026-93927

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12.

CVE-2026-62046

Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0.

CVE-2026-62045

Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This iss

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affil...

CVE-2026-106606

Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows O

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deseriali...

CVE-2026-12626

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deser...

CVE-2026-104723

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injecti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denia...

CVE-2026-102554

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versio

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3.

CVE-2026-94065

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue af

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress T...

CVE-2026-94064

Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object I

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be auth...

CVE-2026-100730

A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects...

CVE-2026-105872

Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/...

CVE-2026-104392

Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Inj

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-09 发布INFO

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommer...

CVE-2026-94568

Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object

历史摘要 · 未重新核验 · NVD

安全公告2026-10-09 发布INFO

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to...

CVE-2026-88131

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-08 发布INFO

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

CVE-2026-88131

Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on th...

CVE-2026-78406

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-08 发布INFO

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on th...

CVE-2026-78401

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote

历史摘要 · 未重新核验 · NVD

安全公告2026-10-08 发布INFO

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage...

CVE-2026-82627

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for Wor

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-07 发布CRITICAL

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that sock...

CVE-2026-105192

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can

来源摘录 · NVD