Safeguard
Tag

cwe-502

Safeguard articles tagged "cwe-502" — guides, analysis, and best practices for software supply chain and application security.

77 articles

Vulnerability Analysis

CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

CVE-2018-0824 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-08-05.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-28986: SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CVE-2024-28986 affects SolarWinds Web Help Desk and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-08-15.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2020-0618: Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CVE-2020-0618 affects Microsoft SQL Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-18.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2022-21445: Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

CVE-2022-21445 affects Oracle ADF Faces and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-18.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CVE-2019-0344 affects SAP Commerce Cloud and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-09-30.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-40711: Veeam Backup and Replication Deserialization Vulnerability

CVE-2024-40711 affects Veeam Backup & Replication and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-17.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-38094: Microsoft SharePoint Deserialization Vulnerability

CVE-2024-38094 affects Microsoft SharePoint and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-10-22.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-23006: SonicWall SMA1000 Appliances Deserialization Vulnerability

CVE-2025-23006 affects SonicWall SMA1000 Appliances and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-01-24.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2025-0994: Trimble Cityworks Deserialization Vulnerability

CVE-2025-0994 affects Trimble Cityworks and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-07.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2017-3066: Adobe ColdFusion Deserialization Vulnerability

CVE-2017-3066 affects Adobe ColdFusion and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-24.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2024-20953: Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2024-20953 affects Oracle Agile Product Lifecycle Management (PLM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-02-24.

Sep 17, 20263 min read
Vulnerability Analysis

CVE-2019-9874: Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CVE-2019-9874 affects Sitecore CMS and Experience Platform (XP) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-26.

Sep 17, 20263 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.