Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Arbitrary File Creation Arbitrary File Read Arbitrary File Write Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial-of-service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilitie Known Vulnerabilities Ldap Injection Malware Missing Update Path Traversal Privilege Escalation Remote Code Execution SSRF SSTI Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity .NET HTTP Remoting publicly exposed High .NET JSON.NET Deserialization RCE High ActiveMQ OpenWire RCE (CVE-2023-46604) Critical AjaxPro.NET Professional Deserialization RCE (CVE-2021-23758) High Apache Log4j socket receiver deserialization vulnerability Critical Apache OFBiz SOAPService Deserialization RCE High Apache OFBiz XMLRPC Deserialization RCE (CVE-2020-9496/CVE-2023-49070) High Apache Shiro Deserialization RCE High Apache Solr Deserialization of untrusted data via jmx.serviceUrl High CakePHP 1.3.5 / 1.2.8 unserialize() vulnerability High ColdFusion AMF Deserialization RCE High ColdFusion CFC Deserialization RCE (CVE-2023-26359/CVE-2023-26360) High ColdFusion FlashGateway Deserialization RCE CVE-2019-7091 High ColdFusion WDDX Deserialization RCE (CVE-2023-29300/CVE-2023-38203/CVE-2023-38204) Critical ColdFusion WDDX Deserialization RCE (CVE-2023-44353) Critical Deserialization of Untrusted Data (.NET BinaryFormatter Object Deserialization) High Deserialization of Untrusted Data (Java JSON Deserialization) Fastjson High Deserialization of Untrusted Data (Java JSON Deserialization) Genson High Deserialization of Untrusted Data (Java JSON Deserialization) Jackson High Deserialization of Untrusted Data (Java JSON Deserialization) JsonIO High Deserialization of Untrusted Data (Java Object Deserialization) High Deserialization of Untrusted Data (XStream) High DNN (DotNetNuke) CMS Cookie Deserialization RCE CVE-2017-9822 High Flex BlazeDS AMF Deserialization RCE High ForgeRock AM / OpenAM Deserialization RCE (CVE-2021-35464) High IBM Aspera Faspex RCE (CVE-2022-47986) Critical IBM WebSphere RCE Java Deserialization Vulnerability High Invision Power Board version 3.3.4 unserialize PHP code execution High Java object deserialization of user-supplied data Medium Kentico CMS Deserialization RCE High Liferay TunnelServlet Deserialization Remote Code Execution High node-serialize Insecure Deserialization High Oracle Access Manager 'opensso' Deserialization RCE (CVE-2021-35587) High Oracle ADF Faces 'Miracle' RCE (CVE-2022-21445) High Oracle Business Intelligence AMF Deserialization RCE CVE-2020-2950 High Oracle E-Business Suite Deserialization RCE High Oracle Weblogic Async Component Deserialization RCE CVE-2019-2725 High Oracle Weblogic WLS-WSAT Component Deserialization RCE High PHP object deserialization of user-supplied data Medium PHP unserialize() used on user input Medium Python object deserialization of user-supplied data Medium Python pickle serialization High Ruby on Rails DoubleTap RCE (CVE-2019-5420) High SAP Hybris Deserialization RCE High Sitecore XM/XP Insecure Deserialization (CVE-2025-27218) Critical Sitecore XP Deserialization RCE (CVE-2021-42237) High SolarWinds Web Help Desk RCE (CVE-2024-28986) Critical Telerik Web UI RadAsyncUpload Deserialization High vBulletin PHP object injection vulnerability High WS_FTP AHT Deserialization RCE (CVE-2023-40044) Critical
