Lucene search
+L

543 matches found

CNNVD
CNNVD
added 2025/08/28 12:0 a.m.3 views

WordPress plugin WP Easy Contact 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

8.1CVSS6.8AI score0.00303EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2019-0187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unauthenticated RCE is possible when JMeter is used in distributed mode -r or -R command line options. Attacker can establish a RMI connection to a jmeter-serve...

9.8CVSS7.3AI score0.02709EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.6 views

CVE-2025-53299

Deserialization of Untrusted Data vulnerability in ThemeMakers ThemeMakers Visual Content Composer tmmcontentcomposer allows Object Injection.This issue affects ThemeMakers Visual Content Composer: from n/a through = 1.5.8...

9.8CVSS5.9AI score0.00498EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.5 views

CVE-2025-53560

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through = 2.6.0...

8.8CVSS5.9AI score0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 1:30 p.m.51 views

CVE-2025-54923

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization...

8.7CVSS0.00668EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 1:30 p.m.3 views

CVE-2025-54923

CWE-502: Deserialization of Untrusted Data vulnerability exists that could cause remote code execution and compromise of system integrity when authenticated users send crafted data to a network-exposed service that performs unsafe deserialization...

8.7CVSS7.8AI score0.00668EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.3 views

CVE-2025-54007

Deserialization of Untrusted Data vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Object Injection.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.11...

8.8CVSS0.0042EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/20 8:15 a.m.5 views

CVE-2025-53560

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through = 2.6.0...

8.8CVSS0.00375EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/20 8:3 a.m.12 views

CVE-2025-49438 WordPress Simple Login Log plugin <= 1.1.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3...

8.1CVSS0.00401EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/20 8:3 a.m.1 views

CVE-2025-53560 WordPress Noisa theme <= 2.6.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in rascals Noisa allows Object Injection. This issue affects Noisa: from n/a through 2.6.0...

8.8CVSS7.1AI score0.00375EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/20 8:3 a.m.17 views

CVE-2025-54007

CVE-2025-54007 affects WordPress Post Grid and Gutenberg Blocks (versions ≤ 2.3.11). Root cause is Deserialization of Untrusted Data leading to PHP Object Injection in the plugin’s handling of data, enabling potential full impact on confidentiality, integrity, and availability. CVSS v3.1 base sco...

8.8CVSS5.9AI score0.0042EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.5 views

WordPress plugin Noisa 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

8.8CVSS6.8AI score0.00375EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.6 views

PT-2025-34000 · Quanticalabs · Quanticalabs Medicenter

Name of the Vulnerable Software and Affected Versions: QuanticaLabs MediCenter - Health Medical Clinic versions n/a through 15.1 Description: The software contains a deserialization of untrusted data issue, which allows for object injection. Recommendations: Versions prior to 15.1 should be...

9.8CVSS6.1AI score0.00396EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/08/20 12:0 a.m.5 views

WordPress plugin MediCenter - Health Medical Clinic 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the WordPre...

9.8CVSS6.7AI score0.00396EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/08/18 12:0 a.m.7 views

Huawei HarmonyOS ability module untrusted data deserialization vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An untrusted data deserialization vulnerability exists in the Huawei HarmonyOS ability module, which can be exploited by an attacker to cause availability to...

5.5CVSS6.9AI score0.00107EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 3:26 p.m.4 views

CVE-2025-8875

Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1...

9.4CVSS7.4AI score0.01588EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.10 views

CVE-2025-54686

Deserialization of Untrusted Data vulnerability in scriptsbundle Exertio exertio allows Object Injection.This issue affects Exertio: from n/a through = 1.3.2...

9.8CVSS5.9AI score0.00396EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/15 12:0 a.m.3 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-18824)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS8.4AI score0.1831EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 6:24 p.m.3 views

CVE-2025-49712

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS7.5AI score0.1831EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/14 6:23 p.m.7 views

CVE-2025-53772

Deserialization of untrusted data in Web Deploy allows an authorized attacker to execute code over a network...

8.8CVSS7.6AI score0.22399EPSS
SaveExploits3References1
Rows per page
Query Builder