Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Object Injection.This issue affects JetEngine: from n/a through < 3.8.4.1.Mar 13, 2026
- Medium5.4A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.EPSS 0.4%Mar 12, 2026
- High7.8SGLangs contains an insecure pickle.load() without validation and proper deserialization.Mar 12, 2026
- Critical9.8SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted d…Mar 12, 2026
- Critical9.8SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loa…Mar 12, 2026
- Low2.1A flaw has been found in Alfresco Activiti up to 7.19/8.8.0.Mar 12, 2026
- High8.8GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.EPSS 0.3%Mar 11, 2026
- High8.1The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stor…Mar 11, 2026
- High8.8Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Mar 10, 2026
- High7.8Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally.Mar 10, 2026
- High7.0CWE-502: Deserialization of untrusted data vulnerability exists that could lead to loss of confidentiality, integrity and potential remote code execution on workstatio…EPSS 0.3%Mar 10, 2026
- Critical9.8A deserialization vulnerability in LimeSurvey before v6.15.0+250623 allows a remote attacker to execute arbitrary code on the server.EPSS 0.9%Mar 10, 2026
- High8.5CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated a…EPSS 0.2%Mar 10, 2026
- Critical9.1SAP NetWeaver Enterprise Portal Administration is vulnerable if a privileged user uploads untrusted or malicious content that, upon deserialization, could result in a…Mar 10, 2026
- High7.5The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute.Mar 7, 2026
- High7.2LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).Mar 5, 2026
- High7.8Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component.Mar 5, 2026
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via de…Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Good Energy goodenergy allows Object Injection.This issue affects Good Energy: from n/a through <= 1.7.7.Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Pizza House pizzahouse allows Object Injection.This issue affects Pizza House: from n/a through <= 1.4.0.Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Dentario dentario allows Object Injection.This issue affects Dentario: from n/a through <= 1.5.Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Kingler kingler allows Object Injection.This issue affects Kingler: from n/a through <= 1.7.Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Tennis Club tennis-sportclub allows Object Injection.This issue affects Tennis Club: from n/a through <= 1.2.3.Mar 5, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1.Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in NextScripts NextScripts social-networks-auto-poster-facebook-twitter-g allows Object Injection.This issue affects Ne…Mar 5, 2026