Insecure deserialization.

Deserialization of untrusted data in NVIDIA BioNeMo Framework

• NVIDIA BioNeMo Framework
• Insecure deserialization

Deserialization of untrusted data in NVIDIA BioNeMo Framework

• NVIDIA BioNeMo Framework
• Insecure deserialization

WatchGuard Firebox Insecure Deserialization in Fireware Access Portal

• WatchGuard Fireware OS
• Insecure deserialization

GIGABYTE｜Performance Library - Insecure Deserialization

• GIGABYTE Performance Library
• Insecure deserialization

GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization

• CASIANO GRID::Machine
• Code injection
• Insecure deserialization

Saloon has insecure deserialization in AccessTokenAuthenticator

• Insecure deserialization

<4.0.0 · fixed in 4.0.0

Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import

• metabase
• Insecure deserialization

splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution

• Insecure deserialization
• CWE-1395

<2.26.1 · fixed in 2.26.1

dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution

• Insecure deserialization

>=0.40.0, <1.60.3 · fixed in 1.60.3

648540858 wvp-GB28181-pro API Endpoint RedisTemplateConfig.java GenericFastJsonRedisSerializer deserialization

• 648540858 wvp-GB28181-pro
• Insecure deserialization
• CWE-20

Frontend Admin by DynamiApps <= 3.28.31 - Authenticated (Editor+) PHP Object Injection via 'post_content' of Admin Form Posts

• shabti Frontend Admin by DynamiApps
• Insecure deserialization

OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution

• Insecure deserialization

<2.26.1 · fixed in 2.26.1

WordPress JS Archive List plugin <= 6.1.7 - PHP Object Injection vulnerability

• Miguel Useche JS Archive List
• Insecure deserialization

WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability

• Edge-Themes Pelicula
• Insecure deserialization

WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability

• Mikado-Themes Stål
• Insecure deserialization

WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability

• Edge-Themes Kamperen
• Insecure deserialization

WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability

• Edge-Themes Gracey
• Insecure deserialization

WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability

• Mikado-Themes Halstein
• Insecure deserialization

WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability

• Elated-Themes Leroux
• Insecure deserialization

WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability

• Edge-Themes Archicon
• Insecure deserialization

WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability

• Select-Themes Borgholm
• Insecure deserialization

WordPress weForms plugin <= 1.6.26 - PHP Object Injection vulnerability

• BoldGrid weForms
• Insecure deserialization

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.6.0 - PHP Object Injection vulnerability

• magepeopleteam Bus Ticket Booking with Seat Reservation
• Insecure deserialization

WordPress Buisson theme <= 1.1.11 - PHP Object Injection vulnerability

• ThemeREX Buisson
• Insecure deserialization

WordPress Work & Travel Company theme <= 1.2 - PHP Object Injection vulnerability

• ThemeREX Work & Travel Company
• Insecure deserialization

WordPress Love Story theme <= 1.3.12 - PHP Object Injection vulnerability

• ThemeREX Love Story
• Insecure deserialization

WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

• sbthemes WooCommerce Infinite Scroll
• Insecure deserialization

WordPress Nexa Blocks plugin <= 1.1.1 - PHP Object Injection vulnerability

• wpdive Nexa Blocks
• Insecure deserialization

WordPress Apicona theme <= 24.1.0 - PHP Object Injection vulnerability

• thememount Apicona
• Insecure deserialization

WordPress Vex theme < 1.2.9 - PHP Object Injection vulnerability

• rascals Vex
• Insecure deserialization

WordPress Pendulum theme < 3.1.5 - PHP Object Injection vulnerability

• rascals Pendulum
• Insecure deserialization

WordPress Meloo theme < 2.8.2 - PHP Object Injection vulnerability

• rascals Meloo
• Insecure deserialization

WordPress Ricky theme < 2.31 - PHP Object Injection vulnerability

• park_of_ideas Ricky
• Insecure deserialization

WordPress Tasty Daily theme < 1.27 - PHP Object Injection vulnerability

• park_of_ideas Tasty Daily
• Insecure deserialization

WordPress Goldish theme < 3.47 - PHP Object Injection vulnerability

• park_of_ideas Goldish
• Insecure deserialization

WordPress KIDZ theme <= 5.24 - PHP Object Injection vulnerability

• park_of_ideas KIDZ
• Insecure deserialization

WordPress SUMO Affiliates Pro plugin < 11.4.0 - PHP Object Injection vulnerability

• FantasticPlugins SUMO Affiliates Pro
• Insecure deserialization

WordPress Visionary Core plugin <= 1.4.9 - PHP Object Injection vulnerability

• NooTheme Visionary Core
• Insecure deserialization

WordPress Jobica Core plugin <= 1.4.1 - PHP Object Injection vulnerability

• NooTheme Jobica Core
• Insecure deserialization

WordPress Organici Library plugin <= 2.1.2 - PHP Object Injection vulnerability

• NooTheme Organici Library
• Insecure deserialization

WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability

• NooTheme CitiLights
• Insecure deserialization

WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability

• Metagauss EventPrime
• Insecure deserialization

WordPress WoodMart theme <= 8.3.8 - PHP Object Injection vulnerability

• xtemos WoodMart
• Insecure deserialization

WordPress Melody theme <= 1.6.3 - PHP Object Injection vulnerability

• AncoraThemes Melody
• Insecure deserialization

WordPress Beelove theme <= 1.2.6 - PHP Object Injection vulnerability

• AncoraThemes Beelove
• Insecure deserialization

WordPress Morning Records theme <= 1.2 - PHP Object Injection vulnerability

• AncoraThemes Morning Records
• Insecure deserialization

WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability

• axiomthemes m2 | Construction and Tools Store
• Insecure deserialization

WordPress Product Feed for WooCommerce plugin <= 2.3.3 - PHP Object Injection vulnerability

• WebToffee Product Feed for WooCommerce
• Insecure deserialization

NVIDIA NeMo Framework contains a vulnerability leading to Remote Code Execution

• Insecure deserialization

<2.6.2 · fixed in 2.6.2

NVIDIA NeMo Framework contains an RCE vulnerability in checkpoint loading

• Insecure deserialization

<2.6.2 · fixed in 2.6.2

Deserialization of untrusted data in NVIDIA Model Optimizer

• NVIDIA Model Optimizer
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Apex

• NVIDIA Apex
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Megatron LM

• NVIDIA Megatron LM
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Megatron LM

• NVIDIA Megatron LM
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Megatron LM

• NVIDIA Megatron LM
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Megatron LM

• NVIDIA Megatron LM
• Insecure deserialization

Deserialization of untrusted data in NVIDIA Megatron LM

• NVIDIA Megatron LM
• Insecure deserialization

A stack overflow and DoS vulnerability in DTStack/chunjun

• DTStack chunjun
• Insecure deserialization

A vulnerability was identified in PyTorch 2.10.0. The affected element is an unknown function of the component pt2 Loading Handler. The manipulation leads to deserialization. The attack can only be...

• Insecure deserialization
• CWE-20

<=2.10.0 · no fixed version yet

WordPress TotalContest Lite plugin <= 2.9.1 - PHP Object Injection vulnerability

• TotalSuite TotalContest Lite
• Insecure deserialization