CWE-502

2,831 vulnerabilities with CWE-502

CVE-2023-3308 MEDIUM

whaleal IceFrog 1.1.8 - Deserialization

CVSS 5.5

CVE-2023-21124 HIGH

Android 11-13 - Local Privilege Escalation via Unsafe Deserialization

CVSS 7.8

CVE-2023-32031 HIGH

Microsoft Exchange Server - Remote Code Execution via Untrusted Data Deserialization

CVSS 8.8

CVE-2023-28310 HIGH

Microsoft Exchange Server - Remote Code Execution via Untrusted Data Deserialization

CVSS 8.0

CVE-2023-3001 HIGH

IGSS Dashboard < 16.0.0.23131 - Remote Code Execution via Malicious File Deserialization

CVSS 7.8

CVE-2023-3234 MEDIUM

crmeb < 4.6.0 - Deserialization of Untrusted Data via PublicController.php put_image Function

CVSS 4.3

CVE-2023-3232 MEDIUM

crmeb < 4.6.0 - Deserialization of Untrusted Data via Image Upload API

CVSS 6.3

CVE-2023-34212 MEDIUM

Apache NiFi 1.8.0-1.21.0 - Authenticated Deserialization of Untrusted Data via JNDI URL Configuration

CVSS 6.5

CVE-2023-30262 HIGH

MIM Concurrent License Server 6.5.0-7.0.9 - Unauthenticated Remote Code Execution via RMI Registry Deserialization

CVSS 8.8

CVE-2023-33496 CRITICAL

xxl-rpc < 1.7.0 - Deserialization of Untrusted Data via NettyDecode#decode

CVSS 9.8

CVE-2023-33284 HIGH

Marval MSM <=15.0 - Authenticated Remote Code Execution

CVSS 8.8

CVE-2023-20888 HIGH

VMware Aria Operations for Networks 6.2.0-6.9.0 - Authenticated Remote Code Execution via Deserialization

CVSS 8.8

CVE-2023-33963 CRITICAL

DataEase < 1.18.7 - Remote Code Execution via Untrusted Data Deserialization

CVSS 9.8

CVE-2023-2288 HIGH

Otter < 2.2.6 - PHAR Deserialization via Unsanitized File Path

CVSS 8.8

CVE-2023-2500 HIGH

Go Pricing WordPress Plugin <= 3.3.19 - Authenticated PHP Object Injection

CVSS 8.8

CVE-2023-27068 CRITICAL

Sitecore Experience Platform <=10.2 - Code Injection

CVSS 9.8

CVE-2023-31058 HIGH

Apache InLong <1.6.0 - Deserialization

CVSS 7.5

CVE-2023-32336 HIGH

IBM InfoSphere Information Server 11.7 - Remote Code Execution via Insecure Deserialization in RMI Service

CVSS 8.8

CVE-2023-31890 CRITICAL

glazedlists <1.11.0 - Code Injection

CVSS 9.8

CVE-2023-20878 HIGH

VMware Aria Operations - Authenticated Remote Code Execution via Deserialization

CVSS 7.2

CVE-2023-30899 CRITICAL

Siveillance Video <2020 R2 V20.2 HotfixRev14 - Authenticated RCE via Unsafe Deserialization

CVSS 9.9

CVE-2023-30898 CRITICAL

Siveillance Video Multiple Versions - Authenticated Remote Code Execution via Event Server Deserialization

CVSS 9.9

CVE-2023-1650 CRITICAL

AI ChatBot WP <4.4.7 - Code Injection

CVSS 9.8

CVE-2023-1347 HIGH

Customizer Export/Import < 0.9.6 - Authenticated PHP Object Injection via Unserialization

CVSS 7.2

CVE-2023-1196 HIGH

Advanced Custom Fields 5.0.0-5.12.5 and 6.x < 6.1.0 - Authenticated PHP Object Injection via Unsafe Unserialization

CVSS 8.8