Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize…Oct 14, 2026
- Critical9.8e107 is a content management system (CMS).Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Oct 14, 2026
- High7.9HPE NonStop Middleware software has secret key handling and data deserialization vulnerability.EPSS 0.4%Oct 14, 2026
- High7.5IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause…EPSS 0.4%Oct 13, 2026
- High7.4Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 1.5%Oct 13, 2026
- High8.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.EPSS 0.3%Oct 13, 2026
- High8.8Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.EPSS 0.9%Oct 13, 2026
- Critical9.3Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data…EPSS 0.6%Oct 13, 2026
- High8.6Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in d…Oct 12, 2026
- High8.8Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Mini…EPSS 0.3%Oct 12, 2026
- High8.8A deserialization of untrusted data vulnerability was found in ManageIQ.EPSS 0.4%Oct 12, 2026
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.EPSS 0.7%Sep 18, 2026
- Critical9.8LMDeploy is a toolkit for compressing, deploying, and serving large language models.EPSS 0.8%Sep 16, 2026
- High8.7NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing…EPSS 1.1%Aug 22, 2026
- High7.8BabelDOC is a document translation tool.EPSS 0.4%Aug 21, 2026
- Critical9.8JetBrains TeamCity Deserialization of Untrusted Data VulnerabilityKEVEPSS 89.6%Jul 27, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 15.9%Jul 14, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 3.0%Jul 14, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityKEVEPSS 46.0%Jun 17, 2026
- Medium6.6Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.EPSS 0.4%May 27, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityKEVEPSS 2.1%May 26, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 2.7%May 22, 2026
- Critical9.8SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python obje…EPSS 0.9%May 18, 2026
107 records · page 1 of 5
PreviousNext