共收录 943 条相关情报。
← 返回所有主题CVE-2026-17416
IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to ex
CVE-2026-87719
GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.8, 19.2 before 19.2.6, and 19.3
CVE-2026-87719
GitLab 官方披露并修复了 GitLab EE 中一个严重安全漏洞（CVE-2026-87719），影响 18.3 起至 19.1.8 之前、19.2 起至 19.2.6 之前、19.3 起至 19.3.2 之前的多个版本。该漏洞源于
CVE-2026-62107
Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.
CVE-2026-62105
Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.
CVE-2026-62103
Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.
CVE-2026-73699
FileRun before 2026.3.0 contains a PHP object injection vulnerability that allows authenticated attackers to execute arb
CVE-2026-81784
Unauthenticated PHP Object Injection in Wise Chat <= 3.4 versions.
CVE-2026-82925
The Site Reviews WordPress plugin before 8.3.0 does not prevent request data from being deserialized, and derives the ke
CVE-2026-57822
When the broker is processing message-based management requests, sent by an authenticated messaging client that is autho
CVE-2026-65772
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network
CVE-2026-47297
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-12745
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticat
CVE-2026-12744
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticat
CVE-2026-12651
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated
CVE-2026-12650
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated
CVE-2026-12648
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated
CVE-2026-77092
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers
CVE-2026-16502
The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all ver
CVE-2026-71374
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Compon