Vulnerability index

Browse CVEs

3,042 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Deserialization of Untrusted DataCWE-502 × clear
Unclassified HIGH 7.8
CVE-2025-13712

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…

Patch available
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14929

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allo…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14930

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e…

Mitigation only
Fix from $1,950 2025-12-23
Unclassified CRITICAL 10.0
CVE-2025-14931

Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot…

Mitigation only
Fix from $2,300 2025-12-23
Transformers HIGH 7.8
CVE-2025-14920

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote att…

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14921

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot…

Mitigation only
Fix from $1,950 2025-12-23
Unclassified HIGH 7.8
CVE-2025-14922

Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to …

Mitigation only
Fix from $1,950 2025-12-23
Transformers HIGH 7.8
CVE-2025-14924

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attac…

Mitigation only
Fix from $1,950 2025-12-23
Unclassified HIGH 7.8
CVE-2025-14925

Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute …

Mitigation only
Fix from $1,950 2025-12-23
Unclassified HIGH 7.5
CVE-2025-14071

The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2…

Patch available
Fix from $1,950 2025-12-21
Unclassified MEDIUM 6.4
CVE-2025-65035

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the works…

Patch available
Fix from $1,600 2025-12-19
Nifi HIGH 8.8
CVE-2025-66524

Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Ser…

Fix: 2.7.0+
Fix from $1,950 2025-12-19
Scrcpy CRITICAL 9.1
CVE-2025-34449

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deseriali…

Fix: 3.3.4+
Fix from $2,300 2025-12-18
Phoniebox HIGH 7.5
CVE-2025-63951

An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c056…

Fix: after 2025-10-07
Fix from $1,950 2025-12-18
Twittodon HIGH 7.5
CVE-2025-63950

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486c…

Fix: after 2023-02-28
Fix from $1,950 2025-12-18
Unclassified HIGH 8.8
CVE-2025-64266

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified CRITICAL 9.8
CVE-2025-64227

Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue af…

Mitigation only
Fix from $2,300 2025-12-18
Unclassified CRITICAL 9.8
CVE-2025-64233

Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through < 1.2…

Mitigation only
Fix from $2,300 2025-12-18
Unclassified CRITICAL 9.8
CVE-2025-64206

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.

Mitigation only
Fix from $2,300 2025-12-18
Wp Gravity Forms Freshdesk Plugin CRITICAL 9.8
CVE-2025-60089

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affect…

Fix: 1.3.6+
Fix from $2,300 2025-12-18
Wp Gravity Forms Insightly CRITICAL 9.8
CVE-2025-60090

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gr…

Fix: 1.1.7+
Fix from $2,300 2025-12-18
Wp Gravity Forms Zoho Crm And Bigin CRITICAL 9.8
CVE-2025-60091

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects W…

Fix: 1.3.0+
Fix from $2,300 2025-12-18
Wp Gravity Forms Constant Contact Plugin CRITICAL 9.8
CVE-2025-60174

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.Thi…

Fix: after 1.1.2
Fix from $2,300 2025-12-18
Wp Gravity Forms Hubspot CRITICAL 9.8
CVE-2025-60178

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravit…

Fix: 1.2.7+
Fix from $2,300 2025-12-18
Wp Gravity Forms Salesforce CRITICAL 9.8
CVE-2025-60180

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue af…

Fix: 1.5.2+
Fix from $2,300 2025-12-18
Unclassified HIGH 7.5
CVE-2025-60080

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Ob…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.8
CVE-2025-60081

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affec…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.8
CVE-2025-60082

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPF…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.8
CVE-2025-60083

Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This i…

Mitigation only
Fix from $1,950 2025-12-18
Unclassified HIGH 8.8
CVE-2025-60084

Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allow…

Mitigation only
Fix from $1,950 2025-12-18