Lucene search
K

27 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017591 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.1CVSS6.9AI score0.02623EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017611 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.8CVSS6.8AI score0.0295EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.7 views

Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017578)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017578 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.1CVSS5.8AI score0.04276EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017603)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017603 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.8CVSS7.3AI score0.05862EPSS
Exploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-2576

Malware in sbrugna...

8.1CVSS7.8AI score0.06186EPSS
Exploits1References17
SUSE CVE
SUSE CVE
added 2023/02/15 3:50 a.m.1 views

SUSE CVE-2020-36189

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource...

8.1CVSS8.7AI score0.04276EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2021/12/09 7:16 p.m.52 views

Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 an 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource...

8.1CVSS8.6AI score0.04276EPSS
Exploits1References13Affected Software1
OSV
OSV
added 2021/12/09 7:16 p.m.0 views

GHSA-VFQX-33QM-G869 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 an 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource...

8.1CVSS7.1AI score0.04276EPSS
Exploits1References13
OSV
OSV
added 2021/12/09 7:16 p.m.0 views

GHSA-F9XH-2QGP-CQ57 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

8.1CVSS7.1AI score0.10179EPSS
Exploits1References13
Github Security Blog
Github Security Blog
added 2021/12/09 7:16 p.m.34 views

Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.6AI score0.05862EPSS
Exploits2References13Affected Software1
Github Security Blog
Github Security Blog
added 2021/12/09 7:15 p.m.33 views

Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 and 2.6.7.5 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.6AI score0.0295EPSS
Exploits2References13Affected Software1
OSV
OSV
added 2021/12/09 7:15 p.m.0 views

GHSA-WH8G-3J2C-RQJ5 Serialization gadgets exploit in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.04249EPSS
Exploits1References13
ATTACKERKB
ATTACKERKB
added 2021/01/07 12:15 a.m.5 views

CVE-2020-36179

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.8AI score0.61883EPSS
Exploits2References13
OSV
OSV
added 2021/01/06 11:15 p.m.1 views

DEBIAN-CVE-2020-36185

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS7.5AI score0.0295EPSS
Exploits1References1
OSV
OSV
added 2021/01/06 11:15 p.m.0 views

UBUNTU-CVE-2020-36181

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.05862EPSS
Exploits2References4
UbuntuCve
UbuntuCve
added 2021/01/06 11:15 p.m.32 views

CVE-2020-36187

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

8.1CVSS6.9AI score0.02335EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2021/01/06 10:29 p.m.33 views

CVE-2020-36188

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

8.1CVSS8.7AI score0.10179EPSS
Exploits1
Debian CVE
Debian CVE
added 2021/01/06 10:29 p.m.24 views

CVE-2020-36189

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource...

8.1CVSS8.7AI score0.04276EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2021/01/01 12:0 a.m.6 views

PT-2021-3166 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.8 FasterXML jackson-databind version 2.6.7.5 Description: The issue is related to the interaction between serialization gadgets and typing, specifically with the...

9.8CVSS6.6AI score0.62015EPSS
Exploits27References213
Positive Technologies
Positive Technologies
added 2021/01/01 12:0 a.m.6 views

PT-2021-3162 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.8 FasterXML jackson-databind versions 2.6.x before 2.6.7.5 Description: The issue is related to the interaction between serialization gadgets and typing, specifically with the...

9.8CVSS6.7AI score0.62015EPSS
Exploits27References217
Rows per page
Query Builder