#cwe-502
共收录 945 条相关情报。
← 返回所有主题 漏洞预警2026-06-02 发布INFO
CVE-2026-24237
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A su
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-24221
NVIDIA NVTabular contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A su
历史摘要 · 未重新核验 · NVD
安全公告2026-06-02 发布INFO
CVE-2026-39555
Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.
This issue affects Askk
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-06-02 发布INFO
CVE-2026-39555
Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.
This issue affects Askk
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-39551
Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection.
This issue affects Töbe
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-39550
Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection.
This issue affects A
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-02 发布INFO
CVE-2026-10566
A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-9330
IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deseria
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-9319
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-49121
AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-38950
An issue in ESA AnomalyMatch before 1.3.1 allow attackers to execute arbitrary code via crafted model checkpoint files.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-10532
Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-7858
A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-45360
Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-42359
A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user wit
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-29 发布INFO
CVE-2026-10042
manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deseri
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-29 发布INFO
CVE-2025-11993
The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all ve
历史摘要 · 未重新核验 · NVD
安全公告2026-05-27 发布INFO
CVE-2026-45077
### Description
`Symfony\Bridge\Monolog\Command\ServerLogCommand` (the `server:log` console command) is a development-t
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-27 发布INFO
CVE-2026-47161
RELATE is a web-based courseware package. Prior to commit d66ba5659b459bf1ba56b7109b5f9ecf197cbefb, RELATE LMS configure
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-45134
LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and
历史摘要 · 未重新核验 · NVD