#cwe-502

共收录 943 条相关情报。

← 返回所有主题
漏洞预警2026-10-12 发布INFO

Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symboli...

CVE-2026-109391

Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated atta

历史摘要 · 未重新核验 · NVD

安全公告2026-10-12 发布INFO

MONAI 1.2.0 before 1.6.1 Insecure Deserialization RCE via nnUNetV2Runner postprocessing_file Path

CVE-2026-109361

MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postpro

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-10-12 发布INFO

MONAI 0.4.0 before 1.6.1 RCE via SENet Pretrained Weights Over Plaintext HTTP

CVE-2026-109360

MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-10-12 发布INFO

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor allows Object Injection. This issue af...

CVE-2026-12613

Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYA

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in product...

CVE-2026-52903

A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_

历史摘要 · 未重新核验 · NVD

安全公告2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

CVE-2026-66563

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0...

CVE-2026-81797

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

CVE-2026-78529

Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

CVE-2026-81797

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.

CVE-2026-78535

Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

CVE-2026-78533

Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.

CVE-2026-78531

Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

CVE-2026-78529

Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

CVE-2026-66569

Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

CVE-2026-66568

Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

CVE-2026-66567

Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

CVE-2026-66565

Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

CVE-2026-66564

Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

CVE-2026-66563

Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-10 发布INFO

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

CVE-2026-66483

Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions.

历史摘要 · 未重新核验 · NVD