Lucene search
+L

1520 matches found

OSV
OSV
•added 2026/10/08 12:38 a.m.•3 views

CLEANSTART-2026-GS75454 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the trino package. Deserialization of untrusted data vulnerability in QOS...

6.3CVSS5.7AI score0.00545EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/08 12:38 a.m.•7 views

CLEANSTART-2026-IG09233 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the trino package. Deserialization of untrusted data vulnerability in QOS...

6.3CVSS5.7AI score0.0037EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/10/07 11:39 p.m.•4 views

Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-78401 DESCRIPTION: IBM Verify Identity Access could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the...

6.7AI score
SaveExploits0Affected Software2
NVD
NVD
•added 2026/10/07 5:17 p.m.•8 views

CVE-2026-95534

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

8.8CVSS0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 5:07 p.m.•11 views

EUVD-2026-94491

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 5:07 p.m.•27 views

CVE-2026-95606

The WordPress The Events Calendar plugin (versions ≤ 6.17.4 ) is vulnerable to a PHP Object Injection vulnerability due to the deserialization of untrusted data . This flaw allows an attacker to inject objects, potentially leading to significant impact on confidentiality, integrity, and availabil...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 5:07 p.m.•26 views

CVE-2026-95606 WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

9.8CVSS0.00331EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 5:00 p.m.•19 views

CVE-2026-95534

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin, affecting versions up to and including 2.0.19 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary c...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 5:00 p.m.•9 views

EUVD-2026-94488

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/07 5:00 p.m.•6 views

CVE-2026-95534 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 5:00 p.m.•25 views

CVE-2026-95534 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

8.8CVSS0.00288EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2026/10/07 2:29 a.m.•19 views

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 — clean-room OpenAM PoC This package rebuilds...

9.8CVSS6.1AI score0.08428EPSS
SaveExploits6
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•6 views

PT-2026-107630

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4...

9.8CVSS5.9AI score0.00331EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/07 12:00 a.m.•6 views

PT-2026-107627

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/06 7:16 p.m.•39 views

CVE-2026-76750 Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

9.8CVSS0.00537EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 7:16 p.m.•4 views

CVE-2026-76750 Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

9.8CVSS6.8AI score0.00537EPSS
SaveExploits0References1
OSV
OSV
•added 2026/10/06 12:39 a.m.•5 views

CLEANSTART-2026-GG17411 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...

6.3CVSS5.7AI score0.0037EPSS
SaveExploits0References3
OSV
OSV
•added 2026/10/06 12:39 a.m.•4 views

CLEANSTART-2026-NU36119 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...

6.3CVSS5.7AI score0.00545EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/05 8:17 p.m.•8 views

CVE-2026-97257

Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a through 1.5.7...

8.8CVSS0.00355EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/05 8:17 p.m.•8 views

CVE-2026-93617

Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1...

7.2CVSS0.003EPSS
SaveExploits0References1
Rows per page
Query Builder