Lucene search
+L

3063 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/05/07 9:23 p.m.5 views

Security Bulletin: Vulnerability in [ALL] jackson-databind - fasterxml-jackson (217968) affects IBM Watson Assistant for IBM Cloud Pak for Data.

Summary Potential vulnerabilities in in ALL jackson-databind - fasterxml-jackson217968 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details IBM X-Force ID: 217968 DESCRIPTION: FasterXML...

1.9AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/05/03 6:58 p.m.40 views

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to XML external entity (XXE) attacks due to FasterXML Jackson Databind (CVE-2020-25649)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to CVE-2020-25649 due to FasterXML Jackson Databind. FasterXML Jackson Databind is used by IBM Engineering Requirements Management DOORS Next for data mapping between JSON and Java objects. The fix includes FasterXML Jackson...

7.5CVSS1.3AI score0.17611EPSS
SaveExploits0Affected Software2
OpenVAS
OpenVAS
added 2022/05/03 12:0 a.m.37 views

Debian: Security Advisory (DLA-2990-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.5AI score0.0486EPSS
SaveExploits1References4
Debian
Debian
added 2022/05/02 6:33 p.m.94 views

[SECURITY] [DLA 2990-1] jackson-databind security update

Debian LTS Advisory DLA-2990-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany May 02, 2022 https://wiki.debian.org/LTS Package : jackson-databind Version : 2.8.6-1+deb9u10 CVE ID : CVE-2020-36518 Debian Bug : 1007109 It was discovered that the implementation of...

7.5CVSS6.7AI score0.0486EPSS
SaveExploits1
OSV
OSV
added 2022/05/02 12:0 a.m.66 views

DLA-2990-1 jackson-databind - security update

Bulletin has no description...

7.5CVSS7.4AI score0.0486EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/05/02 12:0 a.m.45 views

Debian DLA-2990-1 : jackson-databind - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2990 advisory. - jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. CVE-2020-36518 Note that Nessus has not...

7.5CVSS6.8AI score0.0486EPSS
SaveExploits1References6
IBM Security Bulletins
IBM Security Bulletins
added 2022/04/08 1:2 p.m.14 views

Security Bulletin: IBM Sterling Global Mailbox is vulnerable to denial of service due to Jackson-Databind (217968 )

Summary IBM Sterling Global Mailbox is vulnerable to denial of service due to use of jackson-databind. The issue has been addressed. Vulnerability Details IBM X-Force ID: 217968 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by an error when using JDK...

1.3AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/30 3:21 p.m.13 views

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in FasterXML jackson-databind

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of FasterXML jackson-databind. Vulnerability Details Third Party Entry: 217968 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused by an error when using JDK serialization to...

1.6AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/29 10:53 p.m.36 views

Security Bulletin: An vulnerability in 3rd party library jackson-databind affect IBM Spectrum LSF Suite, IBM Spectrum LSF Explorer and IBM Platform Application Center

Summary There is an vulnerabilityCVE-2020-36518 in in 3rd party library jackson-databind affect IBM Spectrum LSF Suite, IBM Spectrum LSF Explorer and IBM Platform Application Center, Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products an...

7.5CVSS7.9AI score0.0486EPSS
SaveExploits1Affected Software3
RedhatCVE
RedhatCVE
added 2022/03/16 11:47 a.m.73 views

CVE-2020-36518

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects...

5CVSS7.2AI score0.0486EPSS
SaveExploits1References4
Apple
Apple
added 2022/03/14 12:0 a.m.774 views

About the security content of Xcode 13.3

About the security content of Xcode 13.3 This document describes the security content of Xcode 13.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

10CVSS10AI score0.99999EPSS
SaveExploits359References1Affected Software1
OSV
OSV
added 2022/03/12 12:0 a.m.816 views

GHSA-57J2-W4CX-62H2 Deeply nested json in jackson-databind

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects...

7.5CVSS7.3AI score0.0486EPSS
SaveExploits1References16
Github Security Blog
Github Security Blog
added 2022/03/12 12:0 a.m.571 views

Deeply nested json in jackson-databind

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects...

7.5CVSS8AI score0.0486EPSS
SaveExploits1References16Affected Software1
NVD
NVD
added 2022/03/11 7:15 a.m.31 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS0.0486EPSS
SaveExploits1References7
OSV
OSV
added 2022/03/11 7:15 a.m.47 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS6.7AI score
SaveExploits0References7
OSV
OSV
added 2022/03/11 7:15 a.m.3 views

DEBIAN-CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS6.7AI score0.0486EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/11 7:15 a.m.35 views

Design/Logic Flaw

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

5CVSS8.3AI score0.0486EPSS
SaveExploits1References7Affected Software31
OSV
OSV
added 2022/03/11 7:15 a.m.5 views

UBUNTU-CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS6.8AI score0.0486EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/11 12:0 a.m.4 views

FasterXML jackson-databind 缓冲区错误漏洞

FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can also be json, xml into Java objects . FasterXML jackson-databind 2.13.0 before...

7.5CVSS7AI score0.0486EPSS
SaveExploits1References47
Vulnrichment
Vulnrichment
added 2022/03/11 12:0 a.m.1 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

6.8AI score0.0486EPSS
SaveExploits1References7
Rows per page
Query Builder