Falhas do tipo CWE-502

2.276 resultados
CVE-2023-3513HIGHRazerCentralService Unsafe Deserialization Escalation of PrivilegeEPSS 0.3%CVE-2026-27749HIGHAvira Internet Security System Speedup Insecure DeserializationEPSS 0.3%CVE-2025-33247HIGHNVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution. A successful expEPSS 0.3%CVE-2026-25449CRITICALWordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-64227CRITICALWordPress Client Invoicing by Sprout Invoices plugin <= 20.8.7 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40758HIGHWordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40751HIGHWordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40739HIGHWordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40759HIGHWordPress Esmée theme <= 1.4 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-47552CRITICALWordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection VulnerabilityEPSS 0.3%CVE-2025-64233CRITICALWordPress Codiqa theme < 1.2.8 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-56031HIGHWordPress Uncanny Automator plugin <= 7.3.1.2 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-11815MEDIUMInsecure Deserialization via MITM in Layer 7 Policy ManagerEPSS 0.3%CVE-2025-13805MEDIUMnutzam NutzBoot LiteRpc-Serializer HttpServletRpcEndpoint.java getInputStream deserializationEPSS 0.3%CVE-2026-42687HIGHWordPress EventPrime plugin <= 4.3.2.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-27333HIGHWordPress Paid Videochat Turnkey Site plugin <= 7.3.23 - Deserialization of untrusted data vulnerabilityEPSS 0.3%CVE-2025-15453MEDIUMmilvus HTTP Endpoint expr.go expr.Exec deserializationEPSS 0.3%CVE-2025-14925HIGHHugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.3%CVE-2022-2465HIGHISaGRAF Workbench Deserialization of Untrusted Data CWE-502EPSS 0.3%CVE-2026-22248HIGHGLPI affected by Remote Code Execution via malicious uploadEPSS 0.3%