CWE-502

2,844 vulnerabilities with CWE-502

CVE-2017-14035 CRITICAL

CrushFTP 8.x < 8.2.0 - Deserialization of Untrusted Data

CVSS 9.8

CVE-2017-11153 CRITICAL

Synology Photo Station < 6.7.3-3432 RCE via Deserialization in synophoto_csPhotoMisc.php

CVSS 9.8

CVE-2017-9785 CRITICAL

NancyFX <1.4.4, <2.0 - Deserialization

CVSS 9.8

CVE-2017-1000053 HIGH

Elixir Plug <v1.0.4,v1.1.7,v1.2.3,v1.3.2 - Code Injection

CVSS 8.1

CVE-2017-1000034 HIGH

Akka <2.4.16, 2.5-M1 - Code Injection

CVSS 8.1

CVE-2017-9844 HIGH

SAP NetWeaver 7400.12.21.30308 - RCE/DoS

CVSS 7.5

CVE-2017-11143 HIGH

PHP < 5.6.30 - Use-After-Free in WDDX Boolean Deserialization

CVSS 7.5

CVE-2017-2295 HIGH

Puppet < 4.10.1 - Remote Code Execution via Unsafe YAML Deserialization

CVSS 8.2

CVE-2017-10803 MEDIUM

Odoo 8.0, 9.0, 10.0 - Authenticated Remote Code Execution via Database Anonymization Unpickle

CVSS 6.5

CVE-2017-2292 CRITICAL

MCollective <2.10.4 - Code Injection

CVSS 9.0

CVE-2017-9830 CRITICAL

Code42 CrashPlan 5.4.x - Remote Code Execution via org.apache.commons.ssl.rmi.DateRMI Deserialization

CVSS 9.8

CVE-2017-9424 CRITICAL

IdeaBlade Breeze <1.6.5 - Code Injection

CVSS 9.8

CVE-2017-5878 CRITICAL

Red5 Media Server < 1.0.8 - Remote Code Execution via AMF Deserialization

CVSS 9.8

CVE-2017-4914 CRITICAL

VMware vSphere Data Protection 5.5.x-6.1.x - Remote Code Execution via Deserialization

CVSS 9.8

CVE-2017-9363 CRITICAL

Soffid IAM < 1.7.4 - Remote Code Execution via Java Deserialization

CVSS 9.8

CVE-2017-7504 CRITICAL

Red Hat JBoss Enterprise Application Platform < 4.0 and JBoss 4.x - Remote Code Execution via Untrusted Deserialization

CVSS 9.8

CVE-2017-8829 HIGH

lintian <= 2.5.50.3 - Remote Code Execution via YAML Deserialization

CVSS 7.8

CVE-2017-8804 HIGH

glibc 2.25 - Denial of Service via xdr_bytes and xdr_string Deserialization Failure

CVSS 7.5

CVE-2017-3066 CRITICAL KEV

Adobe Coldfusion - Insecure Deserialization

CVSS 9.8

CVE-2017-7293 HIGH

Dolby DAX2/DAX3 - Privilege Escalation

CVSS 7.8

CVE-2017-5645 CRITICAL

Apache Log4j 2.0-2.8.1 - Remote Code Execution via Untrusted Data Deserialization

CVSS 9.8

CVE-2017-5983 CRITICAL

Atlassian JIRA Server < 6.3.0 - Remote Code Execution via XML Parser Deserialization

CVSS 9.8

CVE-2017-5929 CRITICAL

Logback < 1.2.0 - Deserialization of Untrusted Data in SocketServer and ServerSocketReceiver

CVSS 9.8

CVE-2017-3159 CRITICAL

Apache Camel < 2.14.4 - Deserialization of Untrusted Data via SnakeYAML

CVSS 9.8

CVE-2017-5830 CRITICAL

Revive Adserver < 4.0.0 - Remote Code Execution via Cookie Deserialization

CVSS 9.8