CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

584 matches found

UbuntuCve•added 2020/03/02 4:15 a.m.•67 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.1AI score0.18383EPSS

SaveExploits0References4

Cvelist•added 2020/03/02 3:59 a.m.•60 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.3AI score0.04613EPSS

SaveExploits0References17

Debian CVE•added 2020/03/02 3:59 a.m.•55 views

CVE-2020-9546

9.8CVSS8.9AI score0.04613EPSS

SaveExploits0

Debian CVE•added 2020/03/02 3:59 a.m.•59 views

CVE-2020-9547

9.8CVSS8.9AI score0.18383EPSS

SaveExploits0

Cvelist•added 2020/03/02 3:58 a.m.•46 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.3AI score0.18921EPSS

SaveExploits0References16

Debian CVE•added 2020/03/02 3:58 a.m.•90 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS8.9AI score0.18921EPSS

SaveExploits0

Positive Technologies•added 2020/03/01 12:00 a.m.•16 views

PT-2020-3305

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.7.9.6 and earlier, 2.8.11.5 and earlier, 2.9.10.3 and earlier Description The issue is related to the interaction between serialization gadgets and typing in the FasterXML jackson-databind library,...

9.8CVSS6.8AI score0.18921EPSS

SaveExploits0References147

GithubExploit•added 2020/02/24 7:43 a.m.•9 views

Exploit for Deserialization of Untrusted Data in Fasterxml Jackson-Databind

CVE-2020-8840: FasterXML/jackson-databind remote code executio...

9.8CVSS8.5AI score0.26587EPSS

SaveExploits5

IBM Security Bulletins•added 2020/02/22 12:15 a.m.•55 views

Security Bulletin: Multiple vulnerabilities in FasterXML Jackson-databind affect IBM Spectrum Protect Plus (CVE-2019-16943, CVE-2019-16942, CVE-2019-17531, CVE-2019-17267, CVE-2019-14540, CVE-2019-16335, CVE-2019-14379, CVE-2019-14439)

Summary There are multiple security vulnerabilities in FasterXML Jackson-databind that affect IBM Spectrum Protect Plus. Vulnerability Details CVEID: CVE-2019-16943 DESCRIPTION: A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is...

9.8CVSS0.3AI score0.10763EPSS

SaveExploits1Affected Software1

IBM Security Bulletins•added 2020/02/18 7:35 p.m.•56 views

Security Bulletin: Security vulnerability affects IBM Cloud Object Storage SDK Java (February 2020 Bulletin)

Summary Security vulnerability affects IBM Cloud Object Storage SDK Java. The vulnerability has been addressed in the latest SDK 2.6.1 release. Vulnerability Details CVEID: CVE-2019-20330 DESCRIPTION: A lacking of certain net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact...

9.8CVSS0.6AI score0.0864EPSS

SaveExploits0Affected Software1

IBM Security Bulletins•added 2020/02/18 4:10 a.m.•37 views

Security Bulletin: A vulnerability has been identified in FasterXML Jackson library shipped with IBM Tivoli Netcool/OMNIbus Common Integration Libraries (CVE-2019-14540)

Summary FasterXML Jackson library is shipped as a component of IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Transformer for Message Bus Integration. Information about security vulnerabilities affecting FasterXML Jackson library has been published. Vulnerability Detai...

9.8CVSS6.8AI score0.10763EPSS

SaveExploits1Affected Software1