CWE-502 · Deserialization of Untrusted Data (page 28)
Page 28 of 31 — CVEs classified under CWE-502, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-9548 | Critical | 9.8 | 2020-03-02 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPC… |
CVE-2020-9547 | Critical | 9.8 | 2020-03-02 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transac… |
CVE-2020-9546 | Critical | 9.8 | 2020-03-02 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zax… |
CVE-2019-5326 | High | 7.2 | 2020-02-27 | An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. Thi… |
CVE-2020-8441 | Critical | 9.8 | 2020-02-19 | JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product. |
CVE-2019-20477 | Critical | 9.8 | 2020-02-19 | PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in t… |
CVE-2020-9006 | Critical | 9.8 | 2020-02-17 | The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in the sgImportPopups function in sg_popup_ajax.php) via PHP Deser… |
CVE-2020-8801 | High | 7.2 | 2020-02-13 | SuiteCRM through 7.11.11 allows PHAR Deserialization. |
CVE-2020-2123 | High | 8.8 | 2020-02-12 | Jenkins RadarGun Plugin 1.7 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code executio… |
CVE-2020-0618 | High | 8.8 | 2020-02-11 | A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Re… |
CVE-2020-8840 | Critical | 9.8 | 2020-02-10 | FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. |
CVE-2020-6770 | Critical | 10.0 | 2020-02-07 | Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system… |
CVE-2013-4521 | Critical | 9.8 | 2020-02-06 | RichFaces implementation in Nuxeo Platform 5.6.0 before HF27 and 5.8.0 before HF-01 does not restrict the classes for which deserialization methods can be call… |
CVE-2020-3716 | Critical | 9.8 | 2020-01-29 | Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted data vulnerability. S… |
CVE-2019-17570 | Critical | 9.8 | 2020-01-23 | An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malic… |
CVE-2020-6959 | Critical | 9.8 | 2020-01-22 | The following versions of MAXPRO VMS and NVR, MAXPRO VMS:HNMSWVMS prior to Version VMS560 Build 595 T2-Patch, HNMSWVMSLT prior to Version VMS560 Build 595 T2-P… |
CVE-2019-17635 | High | 7.8 | 2020-01-17 | Eclipse Memory Analyzer version 1.9.1 and earlier is subject to a deserialization vulnerability if an index file of a parsed heap dump is replaced by a malicio… |
CVE-2020-2604 | High | 8.1 | 2020-01-15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8… |
CVE-2020-2555 | Critical | 9.8 | 2020-01-15 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are… |
CVE-2019-17076 | Critical | 9.8 | 2020-01-08 | An issue was discovered in Jamf Pro 9.x and 10.x before 10.15.1. Deserialization of untrusted data when parsing JSON in several APIs may cause Denial of Servic… |
CVE-2014-1860 | Critical | 9.8 | 2020-01-08 | Contao CMS through 3.2.4 has PHP Object Injection Vulnerabilities |
CVE-2019-20330 | Critical | 9.8 | 2020-01-03 | FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. |
CVE-2016-1000027 | Critical | 9.8 | 2020-01-02 | Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Dependin… |
CVE-2019-14466 | Medium | 6.5 | 2019-12-31 | The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file… |
CVE-2019-19470 | High | 7.8 | 2019-12-30 | Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product… |
CVE-2019-18211 | High | 8.8 | 2019-12-23 | An issue was discovered in Orckestra C1 CMS through 6.6. The EntityTokenSerializer class in Composite.dll is prone to unvalidated deserialization of wrapped Bi… |
CVE-2019-17571 | Critical | 9.8 | 2019-12-20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code… |
CVE-2019-19909 | High | 8.8 | 2019-12-19 | An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occu… |
CVE-2019-8662 | Critical | 9.8 | 2019-12-18 | This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigge… |
CVE-2019-19849 | High | 8.8 | 2019-12-17 | An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the classes QueryGenerator and QueryView… |
CVE-2019-18956 | Critical | 9.8 | 2019-12-17 | Divisa Proxia Suite 9 < 9.12.16, 9.11.19, 9.10.26, 9.9.8, 9.8.43 and 9.7.10, 10.0 < 10.0.32, and 10.1 < 10.1.5, SparkSpace 1.0 < 1.0.30, 1.1 < 1.1.2, and 1.2 <… |
CVE-2019-19826 | Critical | 9.8 | 2019-12-16 | The Views Dynamic Fields module through 7.x-1.0-alpha4 for Drupal makes insecure unserialize calls in handlers/views_handler_filter_dynamic_fields.inc, as demo… |
CVE-2014-3699 | Critical | 9.8 | 2019-12-15 | eDeploy has RCE via cPickle deserialization of untrusted data |
CVE-2019-16774 | Medium | 4.4 | 2019-12-12 | In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver. |
CVE-2019-18316 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application… |
CVE-2019-18283 | Critical | 9.8 | 2019-12-12 | A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authenticati… |
CVE-2019-17358 | High | 8.1 | 2019-12-12 | Cacti through 1.2.7 is affected by multiple instances of lib/functions.php unsafe deserialization of user-controlled data to populate arrays. An authenticated… |
CVE-2019-19373 | High | 7.5 | 2019-12-11 | An issue was discovered in Squiz Matrix CMS 5.5.0 prior to 5.5.0.3, 5.5.1 prior to 5.5.1.8, 5.5.2 prior to 5.5.2.4, and 5.5.3 prior to 5.5.3.3 where a user can… |
CVE-2019-18935 | Critical | 9.8 | 2019-12-11 | Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when… |
CVE-2019-19230 | Critical | 9.8 | 2019-12-09 | An unsafe deserialization vulnerability exists in CA Release Automation (Nolio) 6.6 with the DataManagement component that can allow a remote attacker to execu… |
CVE-2019-17556 | Critical | 9.8 | 2019-12-04 | Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being deserializ… |
CVE-2019-18580 | Critical | 10.0 | 2019-11-26 | Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker… |
CVE-2019-15271 | High | 8.8 | 2019-11-26 | A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execut… |
CVE-2019-4561 | High | 8.8 | 2019-11-20 | IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By… |
CVE-2019-1373 | Critical | 9.8 | 2019-11-12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code… |
CVE-2019-8141 | High | 7.2 | 2019-11-06 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user wit… |
CVE-2019-18631 | High | 7.8 | 2019-11-05 | The Windows component of Centrify Authentication and Privilege Elevation Services 3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.5.0, 3.5.1 (18.8), 3.5.2 (18.11), and 3.6.0 (19… |
CVE-2019-18364 | Critical | 9.8 | 2019-10-31 | In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. |
CVE-2019-18601 | High | 7.5 | 2019-10-29 | OpenAFS before 1.6.24 and 1.8.x before 1.8.5 is prone to denial of service from unserialized data access because remote attackers can make a series of VOTE_Deb… |
CVE-2019-12017 | Critical | 9.8 | 2019-10-24 | A remote code execution vulnerability exists in MapR CLDB code, specifically in the JSON framework that is used in the CLDB code that handles login and ticket… |
CVE-2019-13116 | Critical | 9.8 | 2019-10-16 | The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apa… |
CVE-2019-17531 | Critical | 9.8 | 2019-10-12 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific… |
CVE-2019-17267 | Critical | 9.8 | 2019-10-07 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLo… |
CVE-2019-17206 | Critical | 9.8 | 2019-10-05 | Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper (aka Redis Wrapper) before 0.3.0 allows attackers to execute arbitrary… |
CVE-2019-16891 | Critical | 9.8 | 2019-10-04 | Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload. |
CVE-2019-12630 | Critical | 9.8 | 2019-10-02 | A vulnerability in the Java deserialization function used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary comman… |
CVE-2019-17080 | High | 7.8 | 2019-10-02 | mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs… |
CVE-2019-16943 | Critical | 9.8 | 2019-10-01 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific… |
CVE-2019-16942 | Critical | 9.8 | 2019-10-01 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific… |
CVE-2019-10202 | Critical | 9.8 | 2019-10-01 | A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017… |
CVE-2019-9373 | Medium | 5.5 | 2019-09-27 | In JobStore, there is a mismatched serialization/deserialization for the "battery-not-low" job attribute. This could lead to a local denial of service with no… |
CVE-2019-9365 | Critical | 9.8 | 2019-09-27 | In Bluetooth, there is a possible deserialization error due to missing string validation. This could lead to remote code execution with no additional execution… |
CVE-2019-16894 | Critical | 9.8 | 2019-09-26 | download.php in inoERP 4.15 allows SQL injection through insecure deserialization. |
CVE-2019-16755 | Critical | 9.8 | 2019-09-26 | BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticate… |
CVE-2019-11666 | High | 8.8 | 2019-09-17 | Insecure deserialization of untrusted data in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9… |
CVE-2019-0195 | Critical | 9.8 | 2019-09-16 | Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the fil… |
CVE-2019-16335 | Critical | 9.8 | 2019-09-15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different… |
CVE-2019-14540 | Critical | 9.8 | 2019-09-15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. |
CVE-2019-16317 | High | 8.8 | 2019-09-14 | In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename parameter, because PHAR uplo… |
CVE-2019-0189 | Critical | 9.8 | 2019-09-11 | The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java… |
CVE-2017-18605 | Critical | 9.8 | 2019-09-10 | The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. |
CVE-2017-18604 | High | 7.5 | 2019-09-10 | The sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request. |
CVE-2019-14224 | High | 7.2 | 2019-09-05 | An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was… |
CVE-2019-5069 | High | 8.8 | 2019-09-05 | A code execution vulnerability exists in Epignosis eFront LMS v5.2.12. A specially crafted web request can cause unsafe deserialization potentially resulting i… |
CVE-2018-11569 | Critical | 9.8 | 2019-09-05 | Controller/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2. |
CVE-2019-15780 | Critical | 9.8 | 2019-08-29 | The formidable plugin before 4.02.01 for WordPress has unsafe deserialization. |
CVE-2019-15521 | Critical | 9.8 | 2019-08-26 | Spoon Library through 2014-02-06, as used in Fork CMS before 1.4.1 and other products, allows PHP object injection via a cookie containing an object. |
CVE-2018-20987 | Critical | 9.8 | 2019-08-22 | The newsletters-lite plugin before 4.6.8.6 for WordPress has PHP object injection. |
CVE-2019-11030 | Critical | 9.8 | 2019-08-22 | Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Mirasys.Common.Utils.Security.DataCrypt method in Common.dll in AuditTrailService in SMServer.ex… |
CVE-2019-15321 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled. |
CVE-2019-15320 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled. |
CVE-2019-15319 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce. |
CVE-2018-20984 | Critical | 9.8 | 2019-08-22 | The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. |
CVE-2019-10086 | High | 7.3 | 2019-08-20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader vi… |
CVE-2019-0344 | Critical | 9.8 | 2019-08-14 | Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6.5, 6.6, 6.7, 1808, 1811, 1905, it is possible to execute arbi… |
CVE-2019-14439 | High | 7.5 | 2019-07-30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for… |
CVE-2018-11779 | Critical | 9.8 | 2019-07-26 | In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to d… |
CVE-2019-10173 | Critical | 9.8 | 2019-07-23 | It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been… |
CVE-2019-1010306 | Critical | 9.8 | 2019-07-15 | Slanger 0.6.0 is affected by: Remote Code Execution (RCE). The impact is: A remote attacker can execute arbitrary commands by sending a crafted request to the… |
CVE-2019-10135 | High | 7.2 | 2019-07-11 | A flaw was found in the yaml.load() function in the osbs-client versions since 0.46 before 0.56.1. Insecure use of the yaml.load() function allowed the user to… |
CVE-2018-11307 | Critical | 9.8 | 2019-07-09 | An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltrat… |
CVE-2019-12747 | High | 8.8 | 2019-07-09 | TYPO3 8.x through 8.7.26 and 9.x through 9.5.7 allows Deserialization of Untrusted Data. |
CVE-2019-12384 | Medium | 5.9 | 2019-06-24 | FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from pol… |
CVE-2019-11011 | Critical | 9.8 | 2019-06-21 | Akamai CloudTest before 58.30 allows remote code execution. |
CVE-2018-15890 | Critical | 9.8 | 2019-06-20 | An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java… |
CVE-2019-12814 | Medium | 5.9 | 2019-06-19 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific pr… |
CVE-2019-12868 | High | 7.2 | 2019-06-18 | app/Model/Server.php in MISP 2.4.109 allows remote command execution by a super administrator because the PHP file_exists function is used with user-controlled… |
CVE-2019-12799 | High | 8.8 | 2019-06-13 | In createInstanceFromNamedArguments in Shopware through 5.6.x, a crafted web request can trigger a PHP object instantiation vulnerability, which can result in… |
CVE-2019-7840 | Critical | 9.8 | 2019-06-12 | ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of untrusted data vulnerability. Successful e… |
CVE-2019-12760 | Low | 3.3 | 2019-06-06 | A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache. Cache loading relies on pickle and, provided that… |