共收录 943 条相关情报。
← 返回所有主题CVE-2026-78614
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the audit report feature which allows an a
CVE-2026-78612
WatchGuard Dimension contains an authenticated SQL injection vulnerability in the scheduled report feature which allows
CVE-2026-59307
An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all
CVE-2026-59306
Potential for deserialization of untrusted types in Spring Cloud Stream. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud
CVE-2026-10036
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary c
CVE-2026-10036
SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary c
CVE-2026-78292
Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.
CVE-2026-78276
Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.
CVE-2026-78257
Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.
CVE-2026-59275
A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — fu
CVE-2026-47878
DefaultExecutionContextSerializer, used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes di
CVE-2026-47875
Applications that deserialize execution contexts with Jackson2ExecutionContextStringSerializer are vulnerable to a deser
CVE-2026-47864
SerializingHttpMessageConverter deserializes the body of incoming HTTP requests with a raw java.io.ObjectInputStream and
CVE-2026-47856
Spring Integration's JSON to object conversion uses the json__TypeId__ header to choose the deserialization target type,
CVE-2026-48853
### Summary `GRPC.Codec.Erlpack.decode/2` calls `:erlang.binary_to_term/1` directly on the raw gRPC message body withou
CVE-2026-79657
NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entir
CVE-2026-78572
The Kalles Addons plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.6
CVE-2026-77138
The extension fails to safely process untrusted client input of an attacker-controlled cookie directly to PHP's unserial
CVE-2026-56095
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() functi
CVE-2026-78683
NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the Transition