Search Vulnerabilities

Spinnaker: Improper yaml processing on kustomize bake operations

Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types

Dell Unisphere for PowerMax, version(s) 10

Metabase: Unsafe Deserialization of H2 Query Results

Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders

davenardella snap7 ReadVar Request s7_server.cpp PerformFunctionRead deserialization

Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel

Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no Ob...

Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectI...

Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

AD-Security AD_Miner Cache analyse_cache.py request_a deserialization

kirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserialization

Fickling check_safety() bypass via unlisted standard library modules (_posixsubprocess, site, atexit)

picklescan - Undetected Remote Code Execution via _operator.methodcaller

Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers