CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

894 matches found

FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core. id: CVE-2020-9548 info: name: FasterXML Jackson Databind =2.9.10.4 - Remote Code Execution author: tomaquet18...

9.8CVSS7.8AI score0.18345EPSS

Exploits0References5

Nuclei•added 3 days ago•32 views

FasterXML jackson-databind - Deserialization Remote Code Execution

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap. This vulnerability allows attackers to execute arbitrary code through deserialization of...

9.8CVSS8.7AI score0.18671EPSS

Exploits0References3

Tenable Nessus•added 6 days ago•9 views

Fedora 45 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-ddde3cf003)

The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-ddde3cf003 advisory. Rebase to 2.21.5 to solve the CVE-2026-54518, CVE-2026-54517, CVE-2026-54516, CVE-2026-54515, CVE-2026-54513, CVE-2026-54512 Tenable has extracted t...

8.1CVSS6.2AI score0.00695EPSS

Exploits1References7

IBM Security Bulletins•added 2025/11/12 10:45 a.m.•26 views

Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.

Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...

7.5CVSS6.9AI score0.02706EPSS

Exploits3Affected Software1

BDU FSTEC•added 2025/10/08 12:0 a.m.•3 views

The vulnerability of the Jackson-Core library from the FasterXML project allows attackers to access confidential information.

The vulnerability of the Jackson-Core library from the FasterXML project is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to access confidential information...

4CVSS7.1AI score0.00316EPSS

Exploits0References4Affected Software2