Lucene search
+L

11464 matches found

Vulnrichment
Vulnrichment
•added 2026/06/02 10:44 a.m.•24 views

CVE-2026-39550 WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/02 10:44 a.m.•32 views

EUVD-2026-33911

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/06/02 10:44 a.m.•60 views

CVE-2026-39550 WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS0.00436EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•10 views

CVE-2026-39555: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•8 views

CVE-2026-39550: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•53 views

PT-2026-45731

Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/02 12:00 a.m.•8 views

CVE-2026-39551: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•45 views

PT-2026-45732

Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•42 views

PT-2026-45754

Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1...

8.1CVSS5.8AI score0.00436EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•28 views

WordPress plugin Aperitif code issue vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

8.1CVSS6AI score0.00436EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•23 views

WordPress plugin Töbel has a code vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

8.1CVSS6AI score0.00436EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•30 views

WordPress plugin Askka: code-related vulnerabilities

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

8.1CVSS6AI score0.00436EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2026/06/01 3:30 p.m.•27 views

GHSA-JHQ6-GFMJ-V8FX Logback vulnerable to Object Injection through HardenedObjectInputStream modules

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2026/06/01 3:30 p.m.•24 views

Logback vulnerable to Object Injection through HardenedObjectInputStream modules

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2026/06/01 1:16 p.m.•36 views

CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS0.0037EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/06/01 11:30 a.m.•32 views

CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0
EUVD
EUVD
•added 2026/06/01 11:30 a.m.•30 views

EUVD-2026-33632

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References1
Mend
Mend
•added 2026/06/01 11:30 a.m.•6 views

CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.7AI score0.0037EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/06/01 11:30 a.m.•21 views

CVE-2026-10532 Logback deserialization whitelist bypass for Proxy objects

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/01 11:30 a.m.•31 views

CVE-2026-10532

Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core HardenedObjectInputStream logback-core modules allows Object Injection, albeit heavily restricted. More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer...

6.3CVSS5.8AI score0.0037EPSS
SaveExploits0References2
Rows per page
Query Builder