#cwe-502

共收录 945 条相关情报。

← 返回所有主题
漏洞预警2026-06-18 发布INFO

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization o...

CVE-2026-12569

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vul

历史摘要 · 未重新核验 · NVD

安全公告2026-06-17 发布INFO

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution...

CVE-2026-53805

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inf

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated...

CVE-2026-53874

picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbit

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers...

CVE-2025-71321

picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-17 发布INFO

Unauthenticated PHP Object Injection in Moderno < 1.43 versions.

CVE-2026-49108

Unauthenticated PHP Object Injection in Moderno < 1.43 versions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-16 发布INFO

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlus...

CVE-2026-48775

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbitrary operating system commands as the Nexus process user...

CVE-2026-10748

An authenticated user with the nx-licensing-create privilege can upload a specially crafted license file to execute arbi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-16 发布INFO

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to co...

CVE-2026-24228

NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-15 发布INFO

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc allow unauthenticated attackers to crash the BEAM ...

CVE-2026-48853

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grp

历史摘要 · 未重新核验 · NVD

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.

CVE-2026-49769

Unauthenticated PHP Object Injection in wpForo Forum <= 3.1.0 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.

CVE-2026-49781

Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.

CVE-2026-49770

Unauthenticated PHP Object Injection in WP Travel Engine <= 6.7.12 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7,...

CVE-2026-9691

Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7, WPForms, Elementor, Ninja For

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.

CVE-2026-49768

Unauthenticated PHP Object Injection in Happyforms <= 1.26.13 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms,...

CVE-2026-49765

Unauthenticated PHP Object Injection in Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms <=

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor,...

CVE-2026-49085

Unauthenticated PHP Object Injection in WP Insightly for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor,...

CVE-2026-49105

Unauthenticated PHP Object Injection in WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms <=

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7,...

CVE-2026-49104

Unauthenticated PHP Object Injection in Integration for Keap/infusionsoft and Contact Form 7, WPForms, Elementor, Formid

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1...

CVE-2026-49106

Unauthenticated PHP Object Injection in Integration for Contact Form 7 and Constant Contact <= 1.1.6 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-15 发布INFO

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.

CVE-2026-49763

Unauthenticated PHP Object Injection in Integration for Contact Form 7 HubSpot <= 1.3.7 versions.

历史摘要 · 未重新核验 · GitHub Advisory