Lucene search
+L

29904 matches found

CNNVD
CNNVD
added 2025/11/06 12:00 a.m.9 views

WordPress plugin TranslatePress 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.1CVSS6.8AI score0.00374EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.22 views

PT-2025-45345

Name of the Vulnerable Software and Affected Versions AnyDesk versions through 9.0.4 Description A remote denial of service can occur due to incorrect deserialization, leading to failed memory allocation and a NULL pointer dereference. Recommendations Update AnyDesk to a version later than 9.0.4...

7.5CVSS6.7AI score0.00471EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.21 views

PT-2025-45255

Deserialization of Untrusted Data vulnerability in Cristián Lávaque s2Member s2member allows Object Injection.This issue affects s2Member: from n/a through = 250701...

7AI score0.00469EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.10 views

WordPress plugin WeMusic 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.9AI score0.00431EPSS
SaveExploits0References1
CVE
CVE
added 2025/11/06 12:00 a.m.43 views

CVE-2025-27917

CVE-2025-27917 affects AnyDesk before 9.0.5 on Windows, before 9.0.1 on macOS, before 7.0.0 on Linux, before 7.1.2 on iOS, and before 8.0.0 on Android. The issue is a remote denial of service caused by incorrect deserialization that leads to failed memory allocation and a NULL pointer dereference...

7.5CVSS6.2AI score0.00471EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45302

Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through 1.0.4...

8.8CVSS7AI score0.00418EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.12 views

PT-2025-45286

Deserialization of Untrusted Data vulnerability in WP User Manager WP User Manager wp-user-manager allows Object Injection.This issue affects WP User Manager: from n/a through = 2.9.12...

7AI score0.00487EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45244

Deserialization of Untrusted Data vulnerability in sbouey Falang multilanguage falang allows Object Injection.This issue affects Falang multilanguage: from n/a through = 1.3.65...

8.8CVSS7AI score0.00376EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.12 views

PT-2025-45232

Deserialization of Untrusted Data vulnerability in NooTheme WeMusic noo-wemusic allows Object Injection.This issue affects WeMusic: from n/a through = 1.9.1...

7AI score0.00431EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.19 views

AnyDesk 代码问题漏洞

AnyDesk is a remote desktop connection software from AnyDesk Germany. A security vulnerability exists in AnyDesk 9.0.4 and earlier versions, which stems from improper deserialization leading to memory allocation failure and null pointer dereferencing, which could lead to a remote denial of servic...

7.5CVSS6.7AI score0.00471EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.10 views

WordPress plugin Falang multilanguage 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

8.8CVSS6.9AI score0.00376EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.15 views

PT-2025-45201

Deserialization of Untrusted Data vulnerability in wpdreams Ajax Search Lite ajax-search-lite allows Object Injection.This issue affects Ajax Search Lite: from n/a through = 4.13.3...

7AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.13 views

WordPress plugin Yogi 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

8.8CVSS6.7AI score0.00349EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/11/06 12:00 a.m.14 views

WordPress plugin s2Member 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7AI score0.00469EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/11/05 7:52 p.m.4 views

Deserialization of Untrusted Data

Overview langgraph-checkpoint is a library with base interfaces for LangGraph checkpoint savers. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the JsonPlusSerializer deserialization process of payloads saved in the json serialization mode. An attacker c...

8.5CVSS7.9AI score0.00891EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2025/11/05 7:52 p.m.35 views

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Summary Prior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a remote code execution RCE vulnerability when deserializing payloads saved in the "json" serialization mode. If an attacker can cause your...

7.4CVSS8.4AI score0.00891EPSS
SaveExploits0References6Affected Software1
Snyk
Snyk
added 2025/11/05 7:52 p.m.3 views

Deserialization of Untrusted Data

Overview langgraph is a Building stateful, multi-actor applications with LLMs Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the JsonPlusSerializer deserialization process of payloads saved in the json serialization mode. An attacker can execute arbitrar...

8.5CVSS7.7AI score0.00891EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/11/05 7:52 p.m.5 views

Deserialization of Untrusted Data

Overview langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the JsonPlusSerializer deserialization process of payloads saved in the json serialization mode. ...

8.5CVSS7.9AI score0.00891EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/05 7:52 p.m.26 views

GHSA-WWQV-P2PP-99H5 LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

Summary Prior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a remote code execution RCE vulnerability when deserializing payloads saved in the "json" serialization mode. If an attacker can cause your...

7.4CVSS8.4AI score0.00891EPSS
SaveExploits0References6
OSV
OSV
added 2025/11/05 6:41 p.m.11 views

GO-2025-4087 Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto

Unchecked memory allocation during vector deserialization in github.com/consensys/gnark-crypto...

7.1AI score
SaveExploits0References4
Rows per page
Query Builder