CWE-502
3,539 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
CVEs (3,539)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. |
Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. |
Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions. |
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions. |
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions. |
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. |
Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. |
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions. |
Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions. |
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions. |
Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions. |
Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions. |
Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions. |
Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions. |
Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions. |
Unauthenticated PHP Object Injection in Invetex <= 2.18 versions. |
Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. |
Unauthenticated PHP Object Injection in WineShop <= 3.20 versions. |
Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions. |
Unauthenticated PHP Object Injection in Juno <= 2.25 versions. |