CWE-502

2,844 vulnerabilities with CWE-502

CVE-2017-5954 CRITICAL

serialize-to-js 0.5.0 - Remote Code Execution via Untrusted Data Deserialization

CVSS 9.8

CVE-2017-5941 CRITICAL

node-serialize < 0.0.4 - Remote Code Execution via Unserialize Function

CVSS 9.8

CVE-2016-15044 CRITICAL

Kaltura Video Platform < 11.1.0-2 - Unauthenticated Remote Code Execution via Unsafe Deserialization in keditorservices

CVE-2016-1487 HIGH

Lexmark Markvision Enterprise <2.3.0 - Code Injection

CVSS 8.8

CVE-2016-1000027 CRITICAL

Pivotal Spring Framework <5.3.16 - RCE

CVSS 9.8

CVE-2016-10753 HIGH

e107 2.1.2 - SQL Injection via PHP Object Injection in usersettings.php

CVSS 8.8

CVE-2016-10750 HIGH

Hazelcast < 3.11 - Remote Code Execution via Java Deserialization

CVSS 8.1

CVE-2016-9045 HIGH

ProcessMaker Enterprise Core <3.0.1.7 - Code Injection

CVSS 8.8

CVE-2016-0750 MEDIUM

Infinispan <9.1.0.Final - Code Injection

CVSS 4.2

CVE-2016-4405 HIGH

HP Business Service Management 9.20-9.26 - Remote Code Execution via Apache Commons Collection Deserialization

CVSS 8.8

CVE-2016-4398 HIGH

HP Network Node Manager i <10.10 - RCE

CVSS 8.8

CVE-2016-8653 MEDIUM

Red Hat JBoss Fuse 6-Red Hat A-MQ 6 - DoS

CVSS 5.3

CVE-2016-8648 HIGH

Red Hat JBoss Fuse/J-A-MQ 6.x - Code Injection

CVSS 7.2

CVE-2016-9498 CRITICAL

ManageEngine Applications Manager 12-13 < 13200 - Unauthenticated Remote Code Execution via Unsafe Java Deserialization

CVSS 9.8

CVE-2016-9483 CRITICAL

PHP FormMail Generator - Unauthenticated PHP Code Injection via Untrusted Deserialization

CVSS 9.8

CVE-2016-9585 MEDIUM

Red Hat JBoss EAP 5 - Denial of Service via JMX Endpoint Deserialization

CVSS 5.3

CVE-2016-8519 CRITICAL

HPE Operations Orchestration <10.70 - RCE

CVSS 9.8

CVE-2016-8511 CRITICAL

HP Network Automation <=10.20 - Remote Code Execution via Java Deserialization

CVSS 9.8

CVE-2016-3957 CRITICAL

web2py < 2.14.2 - Remote Code Execution via Pickle Deserialization in Session Cookie

CVSS 9.8

CVE-2016-6814 CRITICAL

Apache Groovy 1.7.0-2.4.7 - Remote Code Execution via Untrusted Data Deserialization

CVSS 9.8

CVE-2016-5003 CRITICAL

Apache ws-xmlrpc 3.1.3 - Remote Code Execution via Deserialization in Serializable Element

CVSS 9.8

CVE-2016-8736 CRITICAL

Apache OpenMeetings < 3.1.2 - Remote Code Execution via RMI Deserialization

CVSS 9.8

CVE-2016-8744 HIGH

Apache Brooklyn <0.10.0 - Code Injection

CVSS 8.8

CVE-2016-6793 CRITICAL

Apache Wicket 1.5.0-1.5.16 - Deserialization of Untrusted Data in DiskFileItem

CVSS 9.1

CVE-2016-4000 CRITICAL

Jython < 2.7.1-rc1 - Remote Code Execution via PyFunction Deserialization

CVSS 9.8