PT-2025-33981 · Unknown · Rascals Noisa

Name of the Vulnerable Software and Affected Versions: rascals Noisa versions through 2.6.0 Description: A deserialization of untrusted data issue in rascals Noisa allows object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-34016 · Unknown · Groundhogg

Name of the Vulnerable Software and Affected Versions: Groundhogg versions through 4.2.2 Description: Deserialization of untrusted data in Groundhogg allows object injection. Recommendations: Update Groundhogg to a version later than 4.2.2...

WordPress plugin Groundhogg 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33978 · Thememakers · Visual Content Composer

Name of the Vulnerable Software and Affected Versions: ThemeMakers Visual Content Composer versions through 1.5.8 Description: ThemeMakers Visual Content Composer is susceptible to object injection due to the deserialization of untrusted data. Recommendations: Update ThemeMakers Visual Content...

Linux Distros Unpatched Vulnerability : CVE-2018-14721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery SSRF attacks by leveraging failure to block the...

Linux Distros Unpatched Vulnerability : CVE-2018-6162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2018-1000873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a...

Schneider Electric EcoStruxure Power Monitoring Expert和EcoStruxure Power Operation AdvancedReporting and Dashboards Module 代码问题漏洞

Schneider Electric EcoStruxure Power Monitoring Expert and EcoStruxure Power Operation AdvancedReporting and Dashboards Module are products of Schneider Electric, France. Schneider Electric EcoStruxure Power Monitoring Expert is a device for power distribution monitoring in IoT...

WordPress plugin和WordPress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2025-33999 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions through 2.11.16 Description: A deserialization of untrusted data issue exists in Welcart e-Commerce, allowing for object injection. Recommendations: Update Welcart e-Commerce to a version later than 2.11.16...

PT-2025-33997 · WordPress · Gutenberg Blocks +1

Name of the Vulnerable Software and Affected Versions: PickPlugins Post Grid and Gutenberg Blocks versions through 2.3.11 Description: Deserialization of untrusted data in PickPlugins Post Grid and Gutenberg Blocks allows for object injection. Recommendations: Versions prior to 2.3.11 are affecte...

PT-2025-33956 · Unknown · Simple-Login-Log

Name of the Vulnerable Software and Affected Versions: Simple Login Log versions through 1.1.3 Description: Deserialization of untrusted data in Simple Login Log allows object injection. Recommendations: Update Simple Login Log to a version later than 1.1.3...

PT-2025-33729 · Volcengine · Volcengine Verl

Name of the Vulnerable Software and Affected Versions: Volcengine versions 3.0.0 Description: A deserialization vulnerability exists in Volcengine's scripts/model merger.py script when using the "fsdp" backend. The script calls torch.load with weights only=False on user-supplied .pt files, allowi...

CVE-2025-50461

A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script when using the "fsdp" backend. The script calls torch.load with weightsonly=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted...

Linux Distros Unpatched Vulnerability : CVE-2020-1953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special...

Linux Distros Unpatched Vulnerability : CVE-2018-19362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from...

Linux Distros Unpatched Vulnerability : CVE-2018-14718

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from...

Linux Distros Unpatched Vulnerability : CVE-2018-19361

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic...

Deserialization

prestashop/prestashop is vulnerable to Deserialization. The vulnerability is due to improper handling of crafted POST requests in the /themes/import component, which allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2018-19360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from...