CWE-502

2,844 vulnerabilities with CWE-502

CVE-2020-6770 CRITICAL

Bosch BVMS Mobile Video Service < 7.5 - Unauthenticated Remote Code Execution via Untrusted Data Deserialization

CVSS 10.0

CVE-2020-3716 CRITICAL

Magento <2.3.3, <2.2.10, <1.14.4.3, <1.9.4.3 - Code Injection

CVSS 9.8

CVE-2020-6959 CRITICAL

Honeywell MAXPRO VMS and NVR < 5.6 - Unauthenticated Remote Code Execution via Unsafe Deserialization

CVSS 9.8

CVE-2020-2604 HIGH

Oracle Java SE 7u241/8u231/11.0.5/13.0.1 & Embedded 8u231 - RCE via Serialization

CVSS 8.1

CVE-2020-2555 CRITICAL KEV

Oracle Coherence 3.7.1.0/12.1.3.0.0/12.2.1.3-4 - RCE

CVSS 9.8

CVE-2019-6834 HIGH

Schneider Electric SESU <2.3.0 - Code Injection

CVSS 7.3

CVE-2019-19810 CRITICAL

Zoom Call Recording 6.3.1 - Unauthenticated Remote Code Execution via Java RMI Deserialization

CVSS 10.0

CVE-2019-4728 HIGH

IBM Sterling B2B Integrator <6.1.0.0 - Code Injection

CVSS 8.8

CVE-2019-7725 CRITICAL

NukeViet < 4.3.04 - Deserialization of Untrusted Data via nvloginhash Cookie

CVSS 9.8

CVE-2019-11286 CRITICAL

VMware GemFire < 9.7.5 and Tanzu GemFire for VMs < 1.8.2 - Authenticated Remote Code Execution via JMX Service

CVSS 9.1

CVE-2019-16112 HIGH

TylerTech Eagle 2018.3.11 - Remote Code Execution via Untrusted Java Deserialization

CVSS 8.8

CVE-2019-17564 CRITICAL

Apache Dubbo 2.5.0-2.5.9, 2.6.0-2.6.7, 2.7.0-2.7.4 - Remote Code Execution via Unsafe Java Deserialization

CVSS 9.8

CVE-2019-2391 MEDIUM

MongoDB Inc. js-bson <1.1.3 - Info Disclosure

CVSS 4.2

CVE-2019-20453 HIGH

Pydio < 8.2.4 - Authenticated Remote Code Execution via PHP Object Injection in HttpDownload Plugin

CVSS 8.8

CVE-2019-20452 HIGH

Pydio < 8.2.4 - Authenticated Remote Code Execution via PHP Object Injection in RecycleBinManager

CVSS 8.8

CVE-2019-14893 CRITICAL

FasterXML jackson-databind < 2.9.10 - Remote Code Execution via Xalan JNDI Gadget Deserialization

CVSS 9.8

CVE-2019-14892 CRITICAL

jackson-databind < 2.6.7.3 - Remote Code Execution via Polymorphic Deserialization

CVSS 9.8

CVE-2019-5326 HIGH

Aruba Airwave VisualRF - Code Injection

CVSS 7.2

CVE-2019-20477 CRITICAL

PyYAML 5.1-5.1.2 - Deserialization of Untrusted Data via Insufficient Class Restrictions

CVSS 9.8

CVE-2019-17570 CRITICAL

Apache XML-RPC - Remote Code Execution via Untrusted Deserialization in XmlRpcResponseParser

CVSS 9.8

CVE-2019-17635 HIGH

Eclipse Memory Analyzer < 1.9.1 - Deserialization of Untrusted Data via Malicious Index File

CVSS 7.8

CVE-2019-17076 CRITICAL

Jamf Pro 9.4-9.101.4 and 10.x < 10.15.1 - Remote Code Execution via JSON Deserialization

CVSS 9.8

CVE-2019-20330 CRITICAL

Netapp Snapcenter < 2.7.9.7 - Insecure Deserialization

CVSS 9.8

CVE-2019-14466 MEDIUM

GONICUS GOsa 2.7.5.2 - Code Injection

CVSS 6.5

CVE-2019-19470 HIGH

TinyWall <2.1.12 - Privilege Escalation

CVSS 7.8