CWE-502

2,830 vulnerabilities with CWE-502

CVE-2023-45146 CRITICAL

XXL-RPC < 1.7.0 - Remote Code Execution via Hessian Deserialization

CVSS 9.0

CVE-2023-35084 CRITICAL

Ivanti Endpoint Manager < 2022 su3 - Remote Code Execution via Unsafe Deserialization

CVSS 9.8

CVE-2023-4971 HIGH

Weaver Xtreme Theme Support < 6.3.1 - Authenticated PHP Object Injection via Import File Deserialization

CVSS 7.2

CVE-2023-23930 MEDIUM

vantage6 < 4.0.2 - Remote Code Execution via Pickle Deserialization

CVSS 5.5

CVE-2023-44392 HIGH

Garden < 0.12.65 - Remote Code Execution via Cryo Deserialization in Test/Run Result ConfigMaps

CVSS 8.2

CVE-2023-26153 HIGH

geokit-rails <2.5.0 - Command Injection

CVSS 8.3

CVE-2023-43981 CRITICAL

Presto Changeo testsitecreator <1.1.1 - Deserialization

CVSS 9.8

CVE-2023-42809 CRITICAL

Redisson < 3.22.0 - Remote Code Execution via Untrusted Java Object Deserialization

CVSS 9.6

CVE-2023-5391 CRITICAL

EcoStruxure Power Monitoring Expert - Remote Code Execution via Untrusted Data Deserialization

CVSS 9.8

CVE-2023-43176 HIGH

Afterlogic Aurora Files <9.7.3 - Code Injection

CVSS 8.8

CVE-2023-43268 HIGH

Deyue Remote Vehicle Management System v1.1 - Deserialization

CVSS 8.8

CVE-2023-39410 HIGH

Apache Avro <= 1.11.2 - Denial of Service via Memory Exhaustion in Data Deserialization

CVSS 7.5

CVE-2023-44273 CRITICAL

gnark-crypto < 0.12.0 - Signature Malleability via EdDSA and ECDSA Deserialization

CVSS 9.8

CVE-2023-5183 CRITICAL

Illumio Core Policy Compute Engine < 19.3.7 - Authenticated Remote Code Execution via Unsafe JSON Deserialization

CVSS 9.9

CVE-2023-43291 CRITICAL

emlog < 2.1.15 - Remote Code Execution via Cache.php Deserialization

CVSS 9.8

CVE-2023-40044 CRITICAL KEV

WS_FTP Server < 8.7.4 - Unauthenticated Remote Code Execution via .NET Deserialization

CVSS 10.0

CVE-2023-40619 CRITICAL

phpPgAdmin <7.14.4 - Code Injection

CVSS 9.8

CVE-2023-5016 MEDIUM

spider-flow < 0.5.0 - Remote Code Execution via Fastjson JDBC Deserialization

CVSS 6.3

CVE-2023-32665 MEDIUM

GLib < 2.74.4 - Denial of Service via GVariant Deserialization

CVSS 5.5

CVE-2023-32636 MEDIUM

glib < 2.74.4 - Denial of Service via GVariant Deserialization Offset Table Validation

CVSS 4.7

CVE-2023-38204 CRITICAL

Adobe ColdFusion <2018u18, <2021u8, <2023u2 - Code Injection

CVSS 9.8

CVE-2023-38155 HIGH

Azure DevOps Server - Remote Code Execution via Untrusted Data Deserialization

CVSS 7.0

CVE-2023-36777 MEDIUM

Microsoft Exchange Server - Info Disclosure

CVSS 5.7

CVE-2023-36757 HIGH

Microsoft Exchange Server - Spoofing via Deserialization of Untrusted Data

CVSS 8.0

CVE-2023-36756 HIGH

Microsoft Exchange Server - Remote Code Execution via Deserialization of Untrusted Data

CVSS 8.0