共收录 945 条相关情报。
← 返回所有主题CVE-2026-63077
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin
CVE-2026-15962
The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and i
CVE-2026-15962
该漏洞影响 WordPress 的 Fluent Forms Pro Add On Pack 插件，版本 ≤ 6.2.6。由于插件对用户提供的输入进行不安全的反序列化操作，导致存在 PHP 对象注入漏洞。攻击者需要拥有至少 Subscrib
CVE-2026-62263
### Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter` meant t
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.
CVE-2026-21655
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec-586. This issue affec
CVE-2026-55223
### Impact The JDBC spec defines the interface `DataSource`, with a method called `getConnection()`, and `ConnectionPoo
CVE-2026-13190
In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities all
CVE-2026-13185
In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager
CVE-2026-24232
NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data
CVE-2026-64606
Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lamb
CVE-2026-64608
Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deserializing data in compa
CVE-2026-63767
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability t
CVE-2026-28220
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i
CVE-2026-28220
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i
CVE-2026-12484
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle d
CVE-2026-12484
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle d
CVE-2026-8476
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching m
CVE-2026-8476
IBM Langflow OSS 1.0.0 through 1.10.0 contain a critical remote code execution vulnerability in the disk-based caching m
CVE-2026-45162
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.7, multiple Pimcore loc