Browse CVEs

HIGH 7.8 CVE-2025-13712 Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… Patch available Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14929 Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allo… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14930 Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to e… Transformers Mitigation only Fix from $1,9502025-12-23 CRITICAL 10.0 CVE-2025-14931 Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot… Mitigation only Fix from $2,3002025-12-23 HIGH 7.8 CVE-2025-14920 Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote att… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14921 Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remot… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14922 Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to … Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14924 Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attac… Transformers Mitigation only Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute … Mitigation only Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-14071 The Live Composer – Free WordPress Website Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2… Patch available Fix from $1,9502025-12-21 MEDIUM 6.4 CVE-2025-65035 pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the works… Patch available Fix from $1,6002025-12-19 HIGH 8.8 CVE-2025-66524 Apache NiFi 1.20.0 through 2.6.0 include the GetAsanaObject Processor, which requires integration with a configurable Distribute Map Cache Client Ser… Nifi 2.7.0+ Fix from $1,9502025-12-19 CRITICAL 9.1 CVE-2025-34449 Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deseriali… Scrcpy 3.3.4+ Fix from $2,3002025-12-18 HIGH 7.5 CVE-2025-63951 An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0ae0e87c056… Phoniebox after 2025-10-07 Fix from $1,9502025-12-18 HIGH 7.5 CVE-2025-63950 An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486c… Twittodon after 2023-02-28 Fix from $1,9502025-12-18 HIGH 8.8 CVE-2025-64266 Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object… Mitigation only Fix from $1,9502025-12-18 CRITICAL 9.8 CVE-2025-64227 Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue af… Mitigation only Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-64233 Deserialization of Untrusted Data vulnerability in BoldThemes Codiqa codiqa allows Object Injection.This issue affects Codiqa: from n/a through < 1.2… Mitigation only Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-64206 Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0. Mitigation only Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60089 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affect… Wp Gravity Forms Freshdesk Plugin 1.3.6+ Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60090 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gr… Wp Gravity Forms Insightly 1.1.7+ Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60091 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects W… Wp Gravity Forms Zoho Crm And Bigin 1.3.0+ Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60174 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Constant Contact Plugin gf-constant-contact allows Object Injection.Thi… Wp Gravity Forms Constant Contact Plugin after 1.1.2 Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60178 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms HubSpot gf-hubspot allows Object Injection.This issue affects WP Gravit… Wp Gravity Forms Hubspot 1.2.7+ Fix from $2,3002025-12-18 CRITICAL 9.8 CVE-2025-60180 Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Object Injection.This issue af… Wp Gravity Forms Salesforce 1.5.2+ Fix from $2,3002025-12-18 HIGH 7.5 CVE-2025-60080 Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Gravity Forms + Drag And Drop Template Builder pdf-for-gravity-forms allows Ob… Mitigation only Fix from $1,9502025-12-18 HIGH 8.8 CVE-2025-60081 Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Object Injection.This issue affec… Mitigation only Fix from $1,9502025-12-18 HIGH 8.8 CVE-2025-60082 Deserialization of Untrusted Data vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Object Injection.This issue affects PDF for WPF… Mitigation only Fix from $1,9502025-12-18 HIGH 8.8 CVE-2025-60083 Deserialization of Untrusted Data vulnerability in add-ons.org PDF Invoice Builder for WooCommerce pdf-for-woocommerce allows Object Injection.This i… Mitigation only Fix from $1,9502025-12-18 HIGH 8.8 CVE-2025-60084 Deserialization of Untrusted Data vulnerability in add-ons.org PDF for Elementor Forms + Drag And Drop Template Builder pdf-for-elementor-forms allow… Mitigation only Fix from $1,9502025-12-18