CWE-502

Medium likelihood

Deserialization of Untrusted Data

Parent: CWE-913 - Improper Control of Dynamically-Managed Code Resources

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

2,743 vulnerabilities with CWE-502
CVE-2025-69405 CRITICAL
Lorem Ipsum | Books & Media Store <=1.2.6 - Deserialization
CVSS 9.8
CVE-2025-69404 CRITICAL
ThemeREX Extreme Store <=1.5.7 - Deserialization
CVSS 9.8
CVE-2025-69382 CRITICAL
Themesflat Elementor <=1.0.1 - Deserialization
CVSS 9.8
CVE-2025-69372 CRITICAL
AncoraThemes SevenHills <=1.6.2 - Deserialization
CVSS 9.8
CVE-2025-69371 CRITICAL
AncoraThemes KindlyCare <=1.6.1 - Deserialization
CVSS 9.8
CVE-2025-69370 CRITICAL
ThemeGoods Capella <=2.5.5 - Deserialization
CVSS 9.8
CVE-2025-69329 CRITICAL
Jthemes Prestige <1.4.1 - Deserialization
CVSS 9.8
CVE-2025-69328 HIGH
Booking and Rental Manager <=2.5.9 - Deserialization
CVSS 8.8
CVE-2025-69301 CRITICAL
ThemeGoods PhotoMe <=5.6.11 - Deserialization
CVSS 9.8
CVE-2025-69294 HIGH
PeakShops <=1.5.9 - Deserialization
CVSS 8.8
CVE-2025-68853 HIGH
Kleor Contact Manager <=9.1.1 - Deserialization
CVSS 8.8
CVE-2025-68541 CRITICAL
BoldThemes Ippsum <=1.2.0 - Deserialization
CVSS 9.8
CVE-2025-68531 HIGH
ModelTheme Addons <1.5.6 - Deserialization
CVSS 8.8
CVE-2025-68526 HIGH
Modal Popup Box <=1.6.1 - Deserialization
CVSS 8.8
CVE-2025-67997 CRITICAL
BoldThemes Travelicious <1.6.7 - Deserialization
CVSS 9.8
CVE-2025-67996 CRITICAL
BoldThemes Nestin <1.2.6 - Deserialization
CVSS 9.8
CVE-2025-67995 CRITICAL
LoftOcean PatioTime <2.1 - Deserialization
CVSS 9.8
CVE-2025-15579 CRITICAL
OpenText Directory Services 10.5-26.1 - Deserialization
CVE-2025-60038 HIGH
Rexroth IndraWorks - Deserialization RCE
CVSS 7.8
CVE-2025-60037 HIGH
Rexroth IndraWorks - Deserialization RCE
CVSS 7.8
CVE-2025-60036 HIGH
Rexroth IndraWorks <15V24 - Deserialization
CVSS 7.8
CVE-2025-60035 HIGH
Rexroth IndraWorks <15V24 - Deserialization
CVSS 7.8
CVE-2025-33253 HIGH
NVIDIA NeMo Framework <=2.6.1 - Malicious File Deserialization Remote Code Execution
CVSS 7.8
CVE-2025-33252 HIGH
NVIDIA NeMo < 2.6.1 - Remote Code Execution via Untrusted Data Deserialization
CVSS 7.8
CVE-2025-33245 HIGH
NVIDIA NeMo Framework <=2.6.1 - Malicious Data Deserialization Remote Code Execution
CVSS 8.0
Details
Vulnerabilities 2,743
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits