CWE-915: CWE-915
Yearly Trend
Top Affected Vendors
All CWE-915 CVEs (18)
This CVE describes a gadget chain vulnerability in Drupal Core that enables object injection when untrusted data is deserialized. While not directly e...
Dec 10, 2024This CVE describes a gadget chain in Drupal Core that enables object injection when untrusted data is deserialized. While the chain itself isn't direc...
Dec 10, 2024This vulnerability allows remote attackers to execute arbitrary code on self-hosted PyTorch Lightning applications by exploiting improper deserializat...
Jun 6, 2024This CVE describes a mass assignment vulnerability in the Anything-LLM software that allows attackers to create administrative accounts by interceptin...
Apr 16, 2024This mass assignment vulnerability in Snipe-IT allows authenticated low-privileged users to modify restricted user attributes, including those of Supe...
Mar 6, 2026CVE-2022-31106 is a prototype pollution vulnerability in underscore.deep library versions before 0.5.3. Attackers can craft malicious payloads to poll...
Jun 28, 2022A class pollution vulnerability in Mesop Python UI framework allows attackers to overwrite global variables and class attributes during runtime. This ...
Mar 27, 2025deepmerge-ts is vulnerable to Prototype Pollution, allowing attackers to modify object prototypes and potentially execute arbitrary code or cause deni...
Apr 1, 2022CVE-2025-52656 is a mass assignment vulnerability in HCL MyXalytics 6.6 that allows attackers to modify sensitive application fields without proper au...
Oct 3, 2025A mass assignment vulnerability in danny-avila/librechat allows attackers to manipulate sensitive fields by sending extra parameters in requests that ...
Sep 29, 2025This CVE describes an object injection vulnerability in Drupal core that allows attackers to modify dynamically-determined object attributes improperl...
Mar 31, 2025CVE-2021-32811 is a remote code execution vulnerability in Zope web application server that allows attackers with admin-level 'Manager' role privilege...
Aug 2, 2021This vulnerability in Svelte's server-side rendering allows attribute spreading on elements to enumerate inherited properties from an object's prototy...
Feb 20, 2026This CVE describes an object injection vulnerability in Drupal core that allows attackers to modify dynamically-determined object attributes improperl...
Nov 18, 2025This CVE describes a Mass Assignment vulnerability in Titra time tracking software that allows authenticated users to inject arbitrary fields into tim...
Jan 8, 2026MyTube versions 1.7.78 and below have a mass assignment vulnerability in settings management that allows attackers to modify arbitrary application set...
Jan 24, 2026A mass assignment vulnerability in @adonisjs/lucid allows remote attackers who can influence data passed to Lucid model assignments to overwrite inter...
Jan 13, 2026An unauthenticated device registration vulnerability in MXsecurity Series allows remote attackers to register unauthorized devices by sending speciall...
Dec 10, 2025About CWE-915 (CWE-915)
Our database tracks 18 CVEs classified as CWE-915, with 4 rated critical and 8 rated high severity. The average CVSS score for CWE-915 vulnerabilities is 7.6.
External reference: View CWE-915 on MITRE CWE →
Monitor CWE-915 Vulnerabilities
Get alerted when new CWE-915 CVEs affect your infrastructure.
Start Monitoring Free