CWE-502

2,844 vulnerabilities with CWE-502

CVE-2016-7050 CRITICAL

Red Hat Enterprise Linux 7 - Remote Code Execution via SerializableProvider Deserialization

CVSS 9.8

CVE-2016-3690 CRITICAL

JBoss Enterprise Application Platform 4.x and 5.x - Remote Code Execution via PooledInvokerServlet Deserialization

CVSS 9.8

CVE-2016-4483 HIGH

libxml2 < 2.9.4 - Denial of Service via Non-UTF-8 Attribute Serialization

CVSS 7.5

CVE-2016-0779 CRITICAL

Apache TomEE <1.7.4, <7.0.0-M3 - RCE

CVSS 9.8

CVE-2016-10304 MEDIUM

SAP NetWeaver AS JAVA 7.5 - Authenticated Denial of Service via Deserialization in EP-RUNTIME Component

CVSS 6.5

CVE-2016-6809 CRITICAL

Apache Tika < 1.14 - Remote Code Execution via MATLAB File Deserialization

CVSS 9.8

CVE-2016-8749 CRITICAL

Apache Camel 2.16.0-2.16.4 2.17.0-2.17.4 2.18.0-2.18.1 - Remote Code Execution via Jackson Unmarshalling

CVSS 9.8

CVE-2016-0360 CRITICAL

IBM Websphere MQ JMS <9.0 - Code Injection

CVSS 9.8

CVE-2016-6199 CRITICAL

Gradle 2.12 - Remote Code Execution via Untrusted Deserialization

CVSS 9.8

CVE-2016-3415 CRITICAL

Zimbra Collaboration Suite < 8.6.0 - Deserialization of Untrusted Data

CVSS 9.1

CVE-2016-9865 CRITICAL

phpMyAdmin < 4.6.5, < 4.4.15.9, < 4.0.10.18 - Unauthenticated Remote Code Execution via Serialized String Parsing Bypass

CVSS 9.8

CVE-2016-6620 CRITICAL

phpMyAdmin <4.6.4, <4.4.15.8, <4.0.10.17 - Code Injection

CVSS 9.8

CVE-2016-7065 HIGH

Red Hat JBoss Enterprise Application Platform 4 and 5 - Remote Code Execution via JMX Servlet Deserialization

CVSS 8.8

CVE-2016-5019 CRITICAL

Apache MyFaces Trinidad Deserialization of Untrusted Data via Serialized View State

CVSS 9.8

CVE-2016-4385 HIGH

HP Network Automation Software - RCE

CVSS 7.3

CVE-2016-6330 CRITICAL

Red Hat JBoss Operations Network (JON) - RCE

CVSS 9.8

CVE-2016-4978 HIGH

Apache ActiveMQ Artemis < 1.4.0 - Authenticated Remote Code Execution via JMS ObjectMessage Deserialization

CVSS 7.2

CVE-2016-7124 CRITICAL

PHP < 5.6.25 and 7.x < 7.0.10 - Denial of Service via Crafted Serialized Data

CVSS 9.8

CVE-2016-1114 CRITICAL

Adobe ColdFusion 10 < Update 19, 11 < Update 8, 2016 < Update 1 - Remote Code Execution via Deserialization

CVSS 9.8

CVE-2015-2020 CRITICAL

MyScript SDK < 1.3 - Remote Code Execution via Untrusted Deserialization

CVSS 9.8

CVE-2015-7501 CRITICAL

Red Hat Data Grid - Remote Code Execution via Deserialization of Untrusted Data

CVSS 9.8

CVE-2015-5164 HIGH

pulpproject qpid - Authenticated Remote Code Execution via Pickle Deserialization

CVSS 7.2

CVE-2015-7450 CRITICAL KEV

IBM Sterling B2B Integrator - Remote Code Execution via Apache Commons Collections Deserialization

CVSS 9.8

CVE-2015-6420 CRITICAL

Apache Commons Collections < 3.2.2 and < 4.1 - Remote Code Execution via Deserialization

CVSS 9.8

CVE-2015-8103 CRITICAL

Jenkins CLI RMI Java Deserialization Vulnerability

CVSS 9.8