#cwe-502

共收录 945 条相关情报。

← 返回所有主题
漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65665

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65663

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-65658

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-64901

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

CVE-2026-63516

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

CVE-2026-63514

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

CVE-2026-62912

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a netw

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivilege...

CVE-2026-35502

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Appli

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

CVE-2026-17061

A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布HIGH

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via the JBoss Marshalling River unmarshaller with no class fi...

CVE-2026-15555

A flaw was found in JBoss marshalling. The Infinispan session replication path deserializes replicated session data via

来源摘录 · NVD

漏洞预警2026-08-10 发布INFO

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a ...

CVE-2026-18948

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, whic

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-09 发布INFO

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node via a crafted keyset pagination cursor. Read actions wit...

CVE-2026-69659

Uncontrolled Resource Consumption vulnerability in ash-project ash allows an attacker to exhaust the memory of the node

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer...

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-07 发布INFO

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attackers with write access to a shared artifact store to execut...

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer

CVE-2026-68772

ZenML 0.94.6 contains a remote code execution vulnerability in the CloudpickleMaterializer component that allows attacke

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-08-07 发布INFO

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing ...

CVE-2026-71560

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malf...

CVE-2026-71559

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a de

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass t...

CVE-2026-71558

Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated attackers to perform PHP Object Injection....

CVE-2026-16258

The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing u

历史摘要 · 未重新核验 · NVD