Deserialization issue in commonly-used Java library allows remote execution.
CVE-2013-1465
Use of PHP unserialize function on untrusted input allows attacker to modify application configuration.
CVE-2012-3527