Lucene search
+L

3003 matches found

Debian
Debian
added 2018/02/15 7:04 a.m.49 views

[SECURITY] [DSA 4114-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4114-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2018 https://www.debian.org/security/faq -...

9.8CVSS9.5AI score0.49727EPSS
SaveExploits1
Debian
Debian
added 2018/02/15 7:04 a.m.51 views

[SECURITY] [DSA 4114-1] jackson-databind security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4114-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2018 https://www.debian.org/security/faq -...

7.5CVSS3AI score0.49727EPSS
SaveExploits1
OSV
OSV
added 2018/02/15 12:00 a.m.36 views

DSA-4114-1 jackson-databind - security update

Bulletin has no description...

9.8CVSS9AI score0.49727EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2018/02/14 12:00 a.m.58 views

Debian: Security Advisory (DSA-4114-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.2AI score0.49727EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2018/02/12 5:19 p.m.8 views

jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper

A deserialization flaw was discovered in the jackson-databind which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS7.6AI score0.37721EPSS
SaveExploits7References4
OpenVAS
OpenVAS
added 2018/02/08 12:00 a.m.61 views

Fedora Update for jackson-databind FEDORA-2018-e4b025841e

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.49727EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2018/02/08 12:00 a.m.54 views

Fedora Update for jackson-databind FEDORA-2018-bbf8c38b51

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.49727EPSS
SaveExploits7References2
Fedora
Fedora
added 2018/02/07 1:18 p.m.69 views

[SECURITY] Fedora 27 Update: jackson-databind-2.7.6-8.fc27

General data-binding functionality for Jackson: works on core streaming API...

9.8CVSS2.2AI score0.49727EPSS
SaveExploits7
Fedora
Fedora
added 2018/02/07 1:00 p.m.52 views

[SECURITY] Fedora 26 Update: jackson-databind-2.7.6-8.fc26

General data-binding functionality for Jackson: works on core streaming API...

9.8CVSS2.2AI score0.49727EPSS
SaveExploits7
OSV
OSV
added 2018/02/06 3:29 p.m.45 views

CVE-2017-15095

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

9.8CVSS9.9AI score
SaveExploits0References32
OSV
OSV
added 2018/02/06 3:29 p.m.4 views

UBUNTU-CVE-2017-15095

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

9.8CVSS7.3AI score0.08357EPSS
SaveExploits2References10
Prion
Prion
added 2018/02/06 3:29 p.m.39 views

Deserialization of untrusted data

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

7.5CVSS9.1AI score0.37721EPSS
SaveExploits7References32Affected Software20
NVD
NVD
added 2018/02/06 3:29 p.m.45 views

CVE-2017-7525

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS9.2AI score0.37721EPSS
SaveExploits7References60
OSV
OSV
added 2018/02/06 3:29 p.m.11 views

DEBIAN-CVE-2017-15095

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

9.8CVSS9.6AI score0.08357EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
added 2018/02/06 3:29 p.m.60 views

CVE-2017-7525

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS7.3AI score0.37721EPSS
SaveExploits7References2
OSV
OSV
added 2018/02/06 3:29 p.m.16 views

UBUNTU-CVE-2017-7525

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS7.3AI score0.37721EPSS
SaveExploits7References3
OSV
OSV
added 2018/02/06 3:29 p.m.5 views

DEBIAN-CVE-2017-7525

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS8.1AI score0.37721EPSS
SaveExploits7References1
Prion
Prion
added 2018/02/06 3:29 p.m.43 views

Deserialization of untrusted data

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

7.5CVSS9.1AI score0.37721EPSS
SaveExploits7References60Affected Software17
NVD
NVD
added 2018/02/06 3:29 p.m.32 views

CVE-2017-15095

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

9.8CVSS9.2AI score0.08357EPSS
SaveExploits2References32
OSV
OSV
added 2018/02/06 3:29 p.m.41 views

CVE-2017-7525

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper...

9.8CVSS10AI score
SaveExploits0References60
Rows per page
Query Builder