Lucene search
+L

5572 matches found

RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.7 views

CVE-2025-32293

Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This issue affects Finance Consultant: from n/a through = 2.8...

8.8CVSS7.2AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.7 views

CVE-2025-32284

Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue affects Pet World: from n/a through = 2.8...

8.8CVSS7.2AI score0.00516EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.12 views

CVE-2025-32292

Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress jarvis allows Object Injection.This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through = 1.8.11...

9.8CVSS7.2AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.11 views

CVE-2025-31631

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House fish-house allows Object Injection.This issue affects Fish House: from n/a through = 1.2.7...

9.8CVSS7.2AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.12 views

CVE-2025-31069

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...

9.8CVSS8.6AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.11 views

CVE-2025-31430

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1...

9.8CVSS8.6AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.8 views

CVE-2025-39503

Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hotel gdlr-hotel allows Object Injection.This issue affects Goodlayers Hotel: from n/a through = 3.1.4...

9.8CVSS5.9AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.9 views

CVE-2025-31049

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...

9.8CVSS8.6AI score0.00554EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.8 views

CVE-2025-48287

Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve wc-pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/a through = 1.6.9...

9.8CVSS5.9AI score0.00471EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.10 views

CVE-2025-39500

Deserialization of Untrusted Data vulnerability in GoodLayers Goodlayers Hostel gdlr-hostel allows Object Injection.This issue affects Goodlayers Hostel: from n/a through = 3.1.2...

9.8CVSS5.9AI score0.00549EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/25 1:19 p.m.10 views

CVE-2025-39485

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through = 5.6...

9.8CVSS7.2AI score0.00549EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2025/05/25 12:30 p.m.12 views

FunAudioLLM InspireMusic deserialization vulnerability

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function loadstatedict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. A...

5.3CVSS6.8AI score0.0018EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/05/25 12:30 p.m.26 views

GHSA-PGP9-G5Q8-J3WP FunAudioLLM InspireMusic deserialization vulnerability

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function loadstatedict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. A...

5.3CVSS7.1AI score0.0018EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/05/25 12:00 a.m.15 views

InspireMusic 代码问题漏洞

InspireMusic is an open source music, song, and audio generation tool from FunAudioLLM. A code issue vulnerability exists in InspireMusic that stems from a deserialization issue in the file inspiremusic/cli/model.py...

5.3CVSS5.5AI score0.0018EPSS
SaveExploits0References7
Veracode
Veracode
added 2025/05/24 1:22 p.m.12 views

Deserialization Of Untrusted Data

transformers is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insufficient validation of model file inputs, which allows attackers to execute arbitrary code when a user loads a malicious file or page...

8.8CVSS7.5AI score0.02435EPSS
SaveExploits1References6Affected Software1
NVD
NVD
added 2025/05/23 1:15 p.m.10 views

CVE-2025-48287

Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve wc-pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/a through = 1.6.9...

9.8CVSS0.00471EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/23 1:15 p.m.12 views

CVE-2025-47568

Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds allows Object Injection. This issue affects ZoomSounds: from n/a through 6.91...

9.8CVSS5.8AI score0.00471EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.11 views

CVE-2025-39485

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through = 5.6...

9.8CVSS0.00549EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.13 views

CVE-2025-39480

Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer cardealer allows Object Injection.This issue affects Car Dealer: from n/a through 1.6.8...

9.8CVSS0.00549EPSS
SaveExploits0References1
NVD
NVD
added 2025/05/23 1:15 p.m.8 views

CVE-2025-32284

Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue affects Pet World: from n/a through = 2.8...

8.8CVSS0.00516EPSS
SaveExploits0References1
Rows per page
Query Builder