534 matches found
FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core. id: CVE-2020-9548 info: name: FasterXML Jackson Databind =2.9.10.4 - Remote Code Execution author: tomaquet18...
FasterXML jackson-databind - Deserialization Remote Code Execution
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap. This vulnerability allows attackers to execute arbitrary code through deserialization of...
EUVD-2026-85003
jackson-databind quadratic forward-reference completion...
CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
CVE-2026-91776
TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfouse = Id.NAME, defaultImpl = ..., every distinct unrecognized type ID...
CVE-2026-91777
Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference and the equivalent...
PT-2026-97134
Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind affected versions not specified Description Forward-reference completion for @JsonIdentityInfo object IDs performs a linear scan of the pending-reference accumulator for every resolved ID. This occurs within the...
Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component.
Summary Security Bulletin: IBM Sterling Partner Engagement Manager is vulnerable to quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component. Vulnerability Details CVEID:CVE-2022-42004 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial o...
EUVD-2021-2578
Malware in sbrugna...
EUVD-2021-2497
Malware in sbrugna...
EUVD-2021-2504
Malware in sbrugna...
EUVD-2021-2486
Malware in sbrugna...
EUVD-2020-0443
Malware in sbrugna...
EUVD-2020-0519
Malware in sbrugna...
EUVD-2019-0182
Malware in sbrugna...
EUVD-2019-0198
Malware in sbrugna...
EUVD-2020-0483
Malware in sbrugna...
EUVD-2020-0440
Malware in sbrugna...