Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5360 matches found

AstraLinux
AstraLinux•added 2026/10/15 3:53 p.m.•45 views

Astra Linux – Vulnerability in Jackson-Databind

FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS7.2AI score0.04092EPSS
SaveExploits2References1
osv_curl
osv_curl•added 2026/10/14 8:00 a.m.•28 views

CURL-CVE-2026-87863 HSTS response erases persisted entries

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

5.9AI score0.00291EPSS
SaveExploits0
UbuntuCve
UbuntuCve•added 2026/10/14 6:00 a.m.•14 views

CVE-2026-87863

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

5.9AI score0.00291EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu•added 2026/10/14 6:00 a.m.•4 views

UBUNTU-CVE-2026-87863

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

6AI score0.00291EPSS
SaveExploits0References6
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•19 views

CLEANSTART-2026-JG13068 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

3.7CVSS6.5AI score0.03732EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•18 views

CLEANSTART-2026-YN02098 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

8.1CVSS7.4AI score0.04881EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•19 views

CLEANSTART-2026-DA50633 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

3.7CVSS6.4AI score0.04022EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•14 views

CLEANSTART-2026-QO65396 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

3.7CVSS6.5AI score0.04246EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•21 views

CLEANSTART-2026-RB86939 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

3.7CVSS6.5AI score0.04246EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:45 a.m.•21 views

CLEANSTART-2026-HN26495 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

3.7CVSS6.4AI score0.03758EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:44 a.m.•15 views

CLEANSTART-2026-FM59801 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2022-21341 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

5.3CVSS6.2AI score0.03765EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:44 a.m.•19 views

CLEANSTART-2026-MZ81816 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2022-21248 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

3.7CVSS6.1AI score0.03763EPSS
SaveExploits0References3
osv_cleanstart
osv_cleanstart•added 2026/10/14 12:42 a.m.•17 views

CLEANSTART-2026-VZ07098 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2024-21217 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

3.7CVSS6.4AI score0.01149EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies•added 2026/10/14 12:00 a.m.•10 views

PT-2026-114314

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An authenticated HTTPS origin can provide an HSTS max-age value that is accepted by the parser but fails during subsequent time serialization. On 64-bit systems, extreme max-age values can resul...

5.9AI score0.00308EPSS
SaveExploits0References56
NVD
NVD•added 2026/10/12 5:17 p.m.•17 views

CVE-2026-109345

DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because INPLACE mode returns a force-removed style element whose text content still carries markup. Attackers can supply a style element containing a closing style tag and an img...

6.1CVSS0.00204EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/10/12 4:05 p.m.•11 views

EUVD-2026-97647

DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because INPLACE mode returns a force-removed style element whose text content still carries markup. Attackers can supply a style element containing a closing style tag and an img...

6.1CVSS5.7AI score0.00204EPSS
SaveExploits0References2
Kitploit
Kitploit•added 2026/10/11 6:59 p.m.•22 views

zkar

ZKar ZKar es una herramienta de análisis del protocolo de serialización de Java implementada en Go. Esta herramienta aún está en desarrollo , por lo que no hay una guía de API completa ni de contribución. ZKar proporciona: Un analizador y visor de cargas útiles de serialización de Java en Go puro...

6.2AI score
SaveExploits0References5
Kitploit
Kitploit•added 2026/10/11 8:12 a.m.•28 views

jenkins-cve-2016-0792

Jenkins CVE-2016-0792 Exploit para la vulnerabilidad de serialización de Jenkins - CVE-2016-0792 Base de datos de exploits https://www.exploit-db.com/exploits/42394/ Más información aquí 1. Contrast Security 2. Pentester Lab Requisitos 1. Python 3.6.x 2. La librería requests es necesaria para que...

9CVSS7AI score0.83259EPSS
SaveExploits23
Kitploit
Kitploit•added 2026/10/11 3:23 a.m.•26 views

freddy

Freddy, el asesino de la serialización - Buscador de errores de deserialización Una extensión de Burp Suite para ayudar a detectar y explotar librerías/API de serialización. Esta útil extensión fue desarrollada originalmente por Nick Bloor @nickstadb para NCC Group y se basa principalmente en el...

6.3AI score
SaveExploits0References2
osv_cleanstart
osv_cleanstart•added 2026/10/10 12:47 a.m.•14 views

CLEANSTART-2026-XX88554 undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON

Security vulnerability affects the n8n package. undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON...

9.1CVSS6.4AI score0.00146EPSS
SaveExploits0References3
Rows per page
Query Builder