vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in pub...

CVE-2026-115912

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo

来源摘录 · NVD / GitHub Advisory

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown function of the component Workshop Scenario Loader. Such...

CVE-2026-116230

A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.3. The affected element is an unknown

来源摘录 · NVD

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map...

CVE-2026-116098

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoint

来源摘录 · NVD

Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi...

CVE-2026-114704

Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.T

历史摘要 · 未重新核验 · GitHub Advisory

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters...

CVE-2026-94075

Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injecti

历史摘要 · 未重新核验 · GitHub Advisory

Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object...

CVE-2026-114196

Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue aff

历史摘要 · 未重新核验 · GitHub Advisory

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection...

CVE-2026-115806

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

历史摘要 · 未重新核验 · GitHub Advisory

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted in...

CVE-2026-115806

The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to,

来源摘录 · NVD

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file...

CVE-2026-57845

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute

来源摘录 · NVD

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an...

CVE-2026-114624

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area enti

来源摘录 · NVD

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that ex...

CVE-2025-30047

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an H

来源摘录 · NVD

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.lo...

CVE-2026-114608

Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable fil

来源摘录 · NVD

Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

## Impact A vulnerability in applications using App router with Cache Component can lead to remote code execution. The

历史摘要 · 未重新核验 · GitHub Advisory

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial

历史摘要 · 未重新核验 · GitHub Advisory

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!” was treated as hav...

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial

来源摘录 · NVD

CVE-2026-114724

CVE-2026-114724

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserial

历史摘要 · 未重新核验 · OSV.dev

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized P...

CVE-2026-29001

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achi

历史摘要 · 未重新核验 · NVD

TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

CVE-2026-29001

TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achi

历史摘要 · 未重新核验 · OSV.dev

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted pres...

CVE-2026-114403

PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to inst

来源摘录 · NVD

The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in...

CVE-2026-82814

The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, an

历史摘要 · 未重新核验 · GitHub Advisory