Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and…EPSS 0.5%Mar 25, 2026
- High7.2Deserialization of Untrusted Data vulnerability in WebToffee Product Feed for WooCommerce webtoffee-product-feed allows Object Injection.This issue affects Product Fee…EPSS 0.5%Mar 25, 2026
- Critical9.8NVIDIA NeMo Framework contains a vulnerability where an attacker may cause remote code execution.Mar 24, 2026
- Critical9.8NVIDIA NeMo Framework contains a vulnerability in checkpoint loading where an attacker could cause remote code execution.Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in inferencing where an Attacker may cause an RCE by convincing a user to load a maliciously crafted input.Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.Mar 24, 2026
- High7.8NVIDIA Model Optimizer for Windows and Linux contains a vulnerability in the ONNX quantization feature, where a user could cause unsafe deserialization by providing a…Mar 24, 2026
- High7.8NVIDIA Megatron-LM contains a vulnerability in the hybrid conversion script where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file.EPSS 0.2%Mar 24, 2026
- High7.8NVIDIA Megatron LM contains a vulnerability in quantization configuration loading, which could allow remote code execution.EPSS 0.3%Mar 24, 2026
- Critical9.0NVIDIA APEX for Linux contains a vulnerability where an unauthorized attacker could cause a deserialization of untrusted data.EPSS 0.6%Mar 24, 2026
- High8.7Deserialization of Untrusted Data vulnerability in DTStack chunjun (chunjun-core/src/main/java/com/dtstack/chunjun/util modules).Mar 24, 2026
- Low1.9A vulnerability was identified in PyTorch 2.10.0.Mar 22, 2026
- Medium6.3Deserialization of Untrusted Data vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Object Injection.This issue affects TotalContest Lite: from n/…EPSS 0.2%Mar 20, 2026
- High8.6SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 20, 2026
- High8.7BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that a…EPSS 34.4%Mar 19, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.This issue affects WishList Member X: from n/a through 3.29.0.Mar 19, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Themeton Finag allows Object Injection.This issue affects Finag: from n/a through 1.5.0.EPSS 0.5%Mar 19, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.EPSS 0.4%Mar 19, 2026
- High8.1Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio -…Mar 19, 2026
- Critical9.3OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands b…Mar 18, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in shinetheme Traveler traveler allows Object Injection.This issue affects Traveler: from n/a through < 3.2.8.1.Mar 18, 2026
- Critical9.1Wazuh is a free and open source platform used for threat prevention, detection, and response.Mar 17, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.EPSS 0.2%Mar 17, 2026
- High8.8This issue affects Apache Spark: before 3.5.7 and 4.0.1.EPSS 5.4%Mar 16, 2026