CWE-502

2,844 vulnerabilities with CWE-502

CVE-2019-7743 CRITICAL

Joomla! 2.5.0-3.9.2 - Deserialization of Untrusted Data via phar:// Stream Wrapper

CVSS 9.8

CVE-2019-1000005 HIGH

mPDF < 7.1.8 - Remote Code Execution via PHAR Deserialization in ImageProcessor

CVSS 8.8

CVE-2019-6503 CRITICAL

Chatopera cosin 3.10.0 - Remote Code Execution via Untrusted Deserialization

CVSS 9.8

CVE-2019-6338 HIGH

Drupal 7.x < 7.62 - Deserialization of Untrusted Data via PEAR Archive_Tar Library

CVSS 8.0

CVE-2019-6446 CRITICAL

NumPy < 1.16.3 - Remote Code Execution via Unsafe Pickle Deserialization

CVSS 9.8

CVE-2018-9474 HIGH

Android - Local Privilege Escalation via MediaPlayer Parcel Deserialization

CVSS 7.8

CVE-2018-18447 CRITICAL

paint.net < 4.1.2 - Deserialization of Untrusted Data

CVSS 9.8

CVE-2018-18446 CRITICAL

paint.net < 4.1.2 - Deserialization of Untrusted Data

CVSS 9.8

CVE-2018-21234 CRITICAL

jodd < 5.0.4 - Deserialization of Untrusted Data via JSON setClassMetadataName

CVSS 9.8

CVE-2018-11569 CRITICAL

Eventum 3.5.0-3.5.1 - Deserialization of Untrusted Data in ListController

CVSS 9.8

CVE-2018-20987 CRITICAL

Tribulant Newsletters < 4.6.8.6 - PHP Object Injection via Untrusted Data Deserialization

CVSS 9.8

CVE-2018-20984 CRITICAL

patreon_wordpress < 1.2.2 - Object Injection via Untrusted Data Deserialization

CVSS 9.8

CVE-2018-11779 CRITICAL

Apache Storm 1.1.0-1.2.2 - Deserialization of Untrusted Data via Storm UI Daemon

CVSS 9.8

CVE-2018-11307 CRITICAL

jackson-databind 2.0.0-2.9.5 - Deserialization of Untrusted Data via iBatis Gadget Class

CVSS 9.8

CVE-2018-15890 CRITICAL

EthereumJ - Remote Code Execution via Unsafe Deserialization

CVSS 9.8

CVE-2018-12680 HIGH

CoAPthon 3.1, 4.0.0-4.0.2 - Denial of Service via Serialize.deserialize() Exception Mishandling

CVSS 7.5

CVE-2018-12679 HIGH

CoAPthon3 1.0-1.0.1 - Denial of Service via Serialize.deserialize() Exception Mishandling

CVSS 7.5

CVE-2018-20221 HIGH

Deltek Ajera Timesheets <9.10.16 - Code Injection

CVSS 8.8

CVE-2018-19276 CRITICAL

OpenMRS Java Deserialization RCE

CVSS 9.8

CVE-2018-12023 HIGH

FasterXML jackson-databind <2.7.9.4-2.8.11.2-2.9.6 - Code Injection

CVSS 7.5

CVE-2018-12022 HIGH

FasterXML jackson-databind <2.7.9.4, 2.8.11.2, 2.9.6 - Code Injection

CVSS 7.5

CVE-2018-20732 CRITICAL

SAS Web Infrastructure Platform < 9.4M6 - Remote Code Execution via Java Deserialization

CVSS 9.8

CVE-2018-20718 CRITICAL

Pydio < 8.2.2 - Unauthenticated Remote Code Execution via PHP Object Injection

CVSS 9.8

CVE-2018-6162 HIGH

Google Chrome <68.0.3440.75 - Heap Corruption

CVSS 8.8

CVE-2018-19362 CRITICAL

FasterXML jackson-databind <2.9.8 - Use After Free

CVSS 9.8