900 matches found
CVE-2020-9547
CVE-2020-9547: FasterXML/jackson-databind 원격 코드 실행 취약점...
CVE-2020-9548
CVE-2020-9548：FasterXML/jackson-databind リモートコード実行脆弱性...
FasterXML jackson-databind - Deserialization Remote Code Execution
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap. This vulnerability allows attackers to execute arbitrary code through deserialization of...
FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core. id: CVE-2020-9548 info: name: FasterXML Jackson Databind =2.9.10.4 - Remote Code Execution author: tomaquet18...
jackson-CVE-2020-8840
CVE-2020-8840 FasterXML/jackson-databind 远程代码执行漏洞...
CVE-2020-8840
CVE-2020-8840：FasterXML/jackson-databind リモートコード実行脆弱性 0x00 はじめに jackson-databind は、FasterXML プロジェクトグループに属するJSON処理ライブラリです。 0x01 脆弱性概要 2月19日、NVDはセキュリティ勧告を公開し、jackson-databind におけるJNDIインジェクションに起因するリモートコード実行脆弱性（CVE-2020-8840）を開示しました。CVSSスコアは9.8です。影響を受けるバージョンの jackson-databind では、一部の xbean-reflect/JND...
CVE-2020-14195
SimpleTest 这是为 FasterXML jackson-databind 进行的简单测试。...
CVE-2020-36179
説明 CVE-2020-36179： FasterXML jackson-databind 2.x（2.9.10.8 未満）は、シリアル化ガジェットと型指定の間の相互作用を誤って処理し、oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS に関連します。 CVE-2020-36180： FasterXML jackson-databind 2.x（2.9.10.8...
CVE-2020-36184
説明 FasterXML jackson-databind 2.x（2.9.10.8 より前）は、シリアル化ガジェットと型指定の間の相互作用を誤って処理します。これは、org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource に関連しています。 RCEの方法 pom.xml root@kitploit: 4.0.0 com.jacksonTest jacksonTest 1.0-SNAPSHOT com.fasterxml.jackson.core jackson-databind 2.9.10.7...
Fedora 45 : fasterxml-oss-parent / jackson-annotations / jackson-bom / etc (2026-ddde3cf003)
The remote Fedora 45 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-ddde3cf003 advisory. Rebase to 2.21.5 to solve the CVE-2026-54518, CVE-2026-54517, CVE-2026-54516, CVE-2026-54515, CVE-2026-54513, CVE-2026-54512 Tenable has extracted t...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.
Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...
The vulnerability of the Jackson-Core library from the FasterXML project allows attackers to access confidential information.
The vulnerability of the Jackson-Core library from the FasterXML project is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to access confidential information...
EUVD-2020-0443
Malware in sbrugna...
EUVD-2021-2578
Malware in sbrugna...
EUVD-2021-2592
Malware in sbrugna...
EUVD-2019-0198
Malware in sbrugna...
EUVD-2021-2504
Malware in sbrugna...
EUVD-2021-2497
Malware in sbrugna...