CWE-502

{
  "affected": [],
  "aliases": [
    "CVE-2026-50652"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-14T17:17:01Z",
    "severity": "HIGH"
  },
  "details": "Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.",
  "id": "GHSA-79fq-78m6-5rrm",
  "modified": "2026-07-14T18:32:05Z",
  "published": "2026-07-14T18:32:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50652"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50652"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2023-32636"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-400",
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-09-14T20:15:09Z",
    "severity": "HIGH"
  },
  "details": "A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does not affect any released version of glib but does affect glib distributors who followed the guidance of glib developers to backport the initial fix for CVE-2023-29499.",
  "id": "GHSA-79g9-vx8c-xfmq",
  "modified": "2023-11-10T18:30:18Z",
  "published": "2023-09-14T21:30:26Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32636"
    },
    {
      "type": "WEB",
      "url": "https://gitlab.gnome.org/GNOME/glib/-/issues/2841"
    },
    {
      "type": "WEB",
      "url": "https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20231110-0002"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-31074"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-04-01T06:15:56Z",
    "severity": "HIGH"
  },
  "details": "Deserialization of Untrusted Data vulnerability in MDJM MDJM Event Management allows Object Injection. This issue affects MDJM Event Management: from n/a through 1.7.5.2.",
  "id": "GHSA-79j4-wmqh-mc63",
  "modified": "2026-04-01T18:34:19Z",
  "published": "2025-04-01T06:30:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31074"
    },
    {
      "type": "WEB",
      "url": "https://patchstack.com/database/wordpress/plugin/mobile-dj-manager/vulnerability/wordpress-mdjm-event-management-plugin-1-7-5-2-php-object-injection-vulnerability?_s_id=cve"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "vllm"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0.10.0"
            },
            {
              "fixed": "0.10.1.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-9141"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-08-21T14:46:51Z",
    "nvd_published_at": null,
    "severity": "HIGH"
  },
  "details": "### Summary\nAn unsafe deserialization vulnerability allows any authenticated user to execute arbitrary code on the server if they are able to get the model to pass the code as an argument to a tool call.\n\n### Details\n vLLM\u0027s [Qwen3 Coder tool parser](https://github.com/vllm-project/vllm/blob/main/vllm/entrypoints/openai/tool_parsers/qwen3coder_tool_parser.py) contains a code execution path that uses Python\u0027s `eval()` function to parse tool call parameters. This occurs during the parameter conversion process when the parser attempts to handle unknown data types.\n\nThis code path is reached when:\n1. Tool calling is enabled (`--enable-auto-tool-choice`)\n2. The qwen3_coder parser is specified (`--tool-call-parser qwen3_coder`)\n3. The parameter type is not explicitly defined or recognized\n\n### Impact\nRemote Code Execution via Python\u0027s `eval()` function.",
  "id": "GHSA-79j6-g2m3-jgfw",
  "modified": "2025-08-21T14:46:51Z",
  "published": "2025-08-21T14:46:51Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-79j6-g2m3-jgfw"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/pull/21396"
    },
    {
      "type": "WEB",
      "url": "https://github.com/vllm-project/vllm/commit/4594fc3b281713bd3d7634405b4a1393af40d294"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/vllm-project/vllm"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder"
}

{
  "affected": [],
  "aliases": [
    "CVE-2019-4728"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2021-01-05T15:15:00Z",
    "severity": "HIGH"
  },
  "details": "IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges. IBM X-Force ID: 172452.",
  "id": "GHSA-79pm-w7jm-jv2r",
  "modified": "2022-05-24T17:37:58Z",
  "published": "2022-05-24T17:37:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-4728"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/172452"
    },
    {
      "type": "WEB",
      "url": "https://www.ibm.com/support/pages/node/6396172"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "net.sf.jasperreports:jasperreports"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-10492"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-01-09T19:55:24Z",
    "nvd_published_at": "2025-09-16T17:15:40Z",
    "severity": "HIGH"
  },
  "details": "A Java deserialisation vulnerability has been discovered in the Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library.",
  "id": "GHSA-7c3f-cg9x-f3gr",
  "modified": "2026-03-09T21:51:00Z",
  "published": "2025-09-16T18:31:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-10492"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Jaspersoft/jasperreports/issues/542"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Jaspersoft/jasperreports/commit/3541a3e2b1ad8b78388ac505091da75cb652a647"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Jaspersoft/jasperreports/commit/827c2f27c4ca8e2c5b3142d76df9c1c8575f3569"
    },
    {
      "type": "WEB",
      "url": "https://community.jaspersoft.com/advisories/jaspersoft-security-advisory-september-16-2025-jaspersoft-library-cve-2025-10492-r6"
    },
    {
      "type": "WEB",
      "url": "https://community.jaspersoft.com/forums/topic/69926-cve-2025-10492-%E2%80%93-no-fix-available-after-jasperreports-upgrade-community-edition"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Jaspersoft/jasperreports"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "JasperReports has a Java deserialisation vulnerability"
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "admidio/admidio"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.3.12"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-47836"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502",
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-10-16T19:50:40Z",
    "nvd_published_at": "2024-10-16T20:15:06Z",
    "severity": "LOW"
  },
  "details": "### Summary\nAn unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server.\n\n### PoC\n1. Go to\nhttps://www.admidio.org/demo_en/adm_program/modules/messages/messages.php\n2. Click on Send Private Message\n3. In the `Message` field, enter the following payload\n`Testing\u003cbr\u003e\u003ch1\u003eHTML\u003c/h1\u003e\u003cbr\u003e\u003ch2\u003eInjection\u003c/h2\u003e`\n\n\u003e \n![image](https://github.com/user-attachments/assets/0e5d9e4e-69c5-4908-9ab9-0c45c2548ff8)\n\n4. Send the message\n5. Open the message again\n\n\u003e \n![image](https://github.com/user-attachments/assets/d36f1b64-7d96-486d-ab65-cce2b7d21428)\n\n\n### Impact\n1. Data Theft: Stealing sensitive information like cookies, session tokens, and user credentials.\n2. Session Hijacking: Gaining unauthorized access to user accounts.\n3. Phishing: Tricking users into revealing sensitive information.\n4. Website Defacement: Altering the appearance or content of the website.\n5. Malware Distribution: Spreading malware to users\u0027 devices.\n6. Denial of Service (DoS): Overloading the server with malicious requests.",
  "id": "GHSA-7c4c-749j-pfp2",
  "modified": "2024-10-16T22:07:51Z",
  "published": "2024-10-16T19:50:40Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/Admidio/admidio/security/advisories/GHSA-7c4c-749j-pfp2"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47836"
    },
    {
      "type": "WEB",
      "url": "https://github.com/Admidio/admidio/commit/176f60de6a38dde2b8e848b97647194c12cf5a6c"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/Admidio/admidio"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Admidio Vulnerable to HTML Injection In The Messages Section"
}

{
  "affected": [
    {
      "database_specific": {
        "last_known_affected_version_range": "\u003c= 1.0.0a1"
      },
      "package": {
        "ecosystem": "PyPI",
        "name": "suricata-update"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.0b1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2018-1000167"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-02-23T20:56:20Z",
    "nvd_published_at": "2018-04-18T19:29:00Z",
    "severity": "HIGH"
  },
  "details": "Suricata-Update uses the insecure `yaml.load()` function. Code will be executed if the yaml-file contains lines like:\n\n```yaml\nhello: !!python/object/apply:os.system [\u0027ls -l \u003e /tmp/output\u0027]\n```\n\nThe vulnerable function can be triggered by \"suricata-update list-sources\". The locally stored index.yaml will be loaded in this function and the malicious code gets executed.",
  "id": "GHSA-7c4h-w765-6pwg",
  "modified": "2024-10-28T14:41:27Z",
  "published": "2022-05-14T03:22:02Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-1000167"
    },
    {
      "type": "WEB",
      "url": "https://github.com/OISF/suricata-update/pull/23"
    },
    {
      "type": "WEB",
      "url": "https://github.com/OISF/suricata-update/commit/76270e73128ca1299b4e33e7e2a74ac3d963a97a"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/OISF/suricata-update"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/suricata-update/PYSEC-2018-75.yaml"
    },
    {
      "type": "WEB",
      "url": "https://redmine.openinfosecfoundation.org/issues/2359"
    },
    {
      "type": "WEB",
      "url": "https://tech.feedyourhead.at/content/remote-code-execution-in-suricata-update"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "OISF suricata-update unsafely deserializes YAML data"
}

{
  "affected": [
    {
      "package": {
        "ecosystem": "Maven",
        "name": "io.jooby:jooby-pac4j"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.17.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Maven",
        "name": "io.jooby:jooby-pac4j"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "3.0.0.M1"
            },
            {
              "fixed": "3.7.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2025-31129"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2025-04-01T14:19:43Z",
    "nvd_published_at": "2025-03-31T19:15:43Z",
    "severity": "HIGH"
  },
  "details": "### Impact\n\nVersions after 2.x and before 3.x of io.jooby:jooby-pac4j can cause deserialization of untrusted data\n\n### Patches\n\n- 2.17.0 (2.x)\n- 3.7.0 (3.x)\n\n### Workarounds\n\n- Not using io.jooby:jooby-pac4j until it gets patches.\n- Check what values you put/save on session\n\n### References\n\nVersion 2.x:\n\nhttps://github.com/jooby-project/jooby/blob/v2.x/modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java#L39-L45\n\nVersion 3.x:\nhttps://github.com/jooby-project/jooby/blob/v3.6.1/modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java#L77-L84\n\n### Cause\n\nIn module pac4j io.jooby.internal.pac4j.SessionStoreImpl#get , it is used to handle sessions , and trying to get key value. In strToObject function ,it\u0027s trying to deserialize value when value starts with \"b64~\" , which might cause deserialization of untrusted data.\n\n[modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java](https://github.com/jooby-project/jooby/blob/v3.6.1/modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java#L77-L84)\n\nHere\u0027s a small demo using SessionStoreImpl#get to handle sessions ,and user can pass parameters.\n\n![\u5c4f\u5e55\u622a\u56fe 2025-03-25 051325](https://github.com/user-attachments/assets/93039a06-d4f1-458a-8595-736b3fede345)\n\nAnd following below is exploiting successfully(execute calculator)\n\n![\u5c4f\u5e55\u622a\u56fe 2025-03-24 015128\uff081\uff09](https://github.com/user-attachments/assets/415cf20c-dda0-4634-83ae-f8fa89677a16)",
  "id": "GHSA-7c5v-895v-w4q5",
  "modified": "2025-04-01T14:19:43Z",
  "published": "2025-04-01T14:19:43Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/jooby-project/jooby/security/advisories/GHSA-7c5v-895v-w4q5"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31129"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jooby-project/jooby/commit/3e13562cf36d7407813eae464e0f4b598de15692"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/jooby-project/jooby"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jooby-project/jooby/blob/v2.x/modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java#L39-L45"
    },
    {
      "type": "WEB",
      "url": "https://github.com/jooby-project/jooby/blob/v3.6.1/modules/jooby-pac4j/src/main/java/io/jooby/internal/pac4j/SessionStoreImpl.java#L77-L84"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "jooby-pac4j: deserialization of untrusted data"
}

{
  "affected": [],
  "aliases": [
    "CVE-2025-5086"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-502"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-06-02T18:15:25Z",
    "severity": "CRITICAL"
  },
  "details": "A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025\u00c2\u00a0could lead to a remote code execution.",
  "id": "GHSA-7c63-xmgg-xrx5",
  "modified": "2025-10-22T00:33:18Z",
  "published": "2025-06-02T18:30:53Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-5086"
    },
    {
      "type": "WEB",
      "url": "https://isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256"
    },
    {
      "type": "WEB",
      "url": "https://www.3ds.com/vulnerability/advisories"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5086"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}