CWE-502

2,844 vulnerabilities with CWE-502

CVE-2019-6980 CRITICAL

Synacor Zimbra Collaboration Suite <8.9 - Deserialization

CVSS 9.8

CVE-2019-7091 CRITICAL

ColdFusion <Update 1, <Update 7, <Update 15 - Code Injection

CVSS 9.8

CVE-2019-12241 CRITICAL

Carts Guru <1.4.5 - Insecure Deserialization

CVSS 9.8

CVE-2019-12240 CRITICAL

Virim plugin 0.4 - Insecure Deserialization

CVSS 9.8

CVE-2019-12086 HIGH

FasterXML jackson-databind <2.9.9 - Code Injection

CVSS 7.5

CVE-2019-4279 CRITICAL

IBM WebSphere App Server <9.0 - RCE

CVSS 9.8

CVE-2019-10912 HIGH

Symfony < 2.8.50, 3.x < 3.4.26, 4.x < 4.1.12, 4.2.x < 4.2.7 - Arbitrary File Deletion via Unsafe Object Caching

CVSS 7.1

CVE-2019-10924 HIGH

LOGO! Soft Comfort < 8.3 - Remote Code Execution via Malicious Project File

CVSS 7.8

CVE-2019-11831 CRITICAL

PharStreamWrapper <2.1.1-3.1.1 - Path Traversal

CVSS 9.8

CVE-2019-11830 CRITICAL

PharStreamWrapper <2.1.1-3.1.1 - Deserialization

CVSS 9.8

CVE-2019-11458 HIGH

CakePHP 3.7.6 - Arbitrary File Write via Unserialized Object in SmtpTransport

CVSS 7.5

CVE-2019-5434 CRITICAL

revive_adserver < 4.2.0 - Remote Code Execution via XML-RPC Unserialize

CVSS 9.8

CVE-2019-7214 CRITICAL

SmarterTools SmarterMail less than build 6985 - .NET Deserialization Remote Code Execution

CVSS 9.8

CVE-2019-9056 HIGH

CMS Made Simple 2.2.8 - Authenticated Object Injection via FrontEndUsers Module

CVSS 8.8

CVE-2019-7361 HIGH

Autodesk Advance Steel 2018 - Remote Code Execution via Malicious .actm File Deserialization

CVSS 7.8

CVE-2019-10867 HIGH

pimcore < 5.7.1 - Authenticated Remote Code Execution via Unserialize in Bulk-Commit Endpoint

CVSS 8.8

CVE-2019-10068 CRITICAL KEV

Kentico <12.0.15, 11.0.48, 10.0.52, 9.x - Code Injection

CVSS 9.8

CVE-2019-9061 HIGH

CMS Made Simple < 2.2.8 - Authenticated Object Injection via Module Installation

CVSS 8.8

CVE-2019-9057 HIGH

CMS Made Simple < 2.2.8 - Authenticated Object Injection via FilePicker Module

CVSS 8.8

CVE-2019-9055 HIGH

CMS Made Simple < 2.2.8 - Authenticated Remote Code Execution via m1_allparms Deserialization

CVSS 8.8

CVE-2019-7539 HIGH

ipycache <2016-05-31 - Code Injection

CVSS 8.8

CVE-2019-0192 CRITICAL

Apache Solr 5.0.0-5.5.5 and 6.0.0-6.6.5 - Remote Code Execution via JMX Config API

CVSS 9.8

CVE-2019-0187 CRITICAL

Apache JMeter < 5.1 - Unauthenticated Remote Code Execution via RMI Deserialization

CVSS 9.8

CVE-2019-9212 CRITICAL

SOFA-Hessian < 4.0.2 - Remote Code Execution via Hessian Deserialization

CVSS 9.8

CVE-2019-6340 HIGH KEV

Drupal 7.0.0-7.61.0 8.5.0-8.5.10 8.6.0-8.6.9 - Remote Code Execution via Unsanitized Field Data

CVSS 8.1