Falhas do tipo CWE-502

2.257 resultados
CVE-2026-57527HIGHZAP ViewState Add-on Insecure Deserialization via JSFViewState.decode()EPSS 0.5%CVE-2026-7647HIGHProfile Builder Pro <= 3.14.5 - Unauthenticated PHP Object InjectionEPSS 0.5%CVE-2025-30618CRITICALWordPress Rapyd Payment Extension for WooCommerce plugin <= 1.2.0 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-24777HIGHWordPress Hillter theme <= 3.0.7 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-24779HIGHWordPress Yogi theme < 2.9.3 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-2939MEDIUMNinja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code ExecutionEPSS 0.5%CVE-2025-28970CRITICALWordPress WP Optimize By xTraffic plugin <= 5.1.6 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-31919CRITICALWordPress Spare <= 1.7 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-12305MEDIUMquequnlong shiyi-blog Job SysJobController.java deserializationEPSS 0.5%CVE-2025-48780CRITICALSoar Cloud HRD Human Resource Management System - Deserialization of Untrusted DataEPSS 0.5%CVE-2026-1426HIGHAdvanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer CompatibilityEPSS 0.5%CVE-2025-14476HIGHDoubly <= 1.0.46 - Authenticated (Subscriber+) PHP Object Injection via ZIP File ImportEPSS 0.5%CVE-2025-49393CRITICALWordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-60210CRITICALWordPress Everest Forms - Frontend Listing plugin <= 1.0.5 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-49380CRITICALWordPress WooCommerce Vehicle Parts Finder plugin <= 3.7 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2026-31232HIGHThe CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (EPSS 0.5%CVE-2025-14044HIGHVisitor Logic Lite <= 1.0.3 - Unauthenticated PHP Object Injection via 'lpblocks' CookieEPSS 0.5%CVE-2025-48459MEDIUMApache IoTDB: Deserialization of untrusted DataEPSS 0.5%CVE-2025-2043MEDIUMLinZhaoguan pb-cms Add New Topic admin#themes deserializationEPSS 0.5%CVE-2024-29800HIGHWordPress Timber plugin <= 1.23.0 - Deserialization of untrusted data vulnerabilityEPSS 0.5%