共收录 945 条相关情报。
← 返回所有主题CVE-2026-56095
The extension's indexer passed every field value returned by content object rendering through PHP's unserialize() functi
CVE-2026-78683
NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the Transition
CVE-2026-78262
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-32563
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
CVE-2026-78262
CVE-2026-78262 是影响 WordPress 插件 WP Project Manager 4.0.6 及之前版本的一个未认证 PHP 对象注入漏洞。该漏洞的 CVSS 评分为 9.8，属于严重级别。攻击者无需任何身份验证即可利用
CVE-2026-32563
Subscriber PHP Object Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions.
CVE-2026-40877
Combodo iTop is a web-based IT service management tool. Prior to 3.2.3, iTop is vulnerable to PHP object injection in th
CVE-2026-76843
The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load sta
CVE-2026-66650
Unauthenticated PHP Object Injection in FreightCo <= 1.1.15 versions.
CVE-2026-78147
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of th
CVE-2026-0551
The PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and
CVE-2026-0551
CVE-2026-0551 是 WordPress 插件 PPWP – Password Protect Pages 中存在的 PHP 对象注入漏洞，影响所有版本直至并包括 1.9.18。漏洞根因在于插件对 'post_protection
CVE-2026-4703
The WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all ve
CVE-2026-71513
NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle m
CVE-2026-54071
BabelDOC is a document translation tool. Prior to 0.6.3, BabelDOC's vendored PDF parser in babeldoc/pdfminer/cmapdb.py d
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne
CVE-2026-69836
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne