5898 matches found
ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), ai.databand:dbnd-agent (>=0.42.1, <=0.80.6) +5545 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0, <=2.7.9.1)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.7.0, =0.3.0, =0.42.1, =0.42.1, =0.40.2, =0.42.1, =0.2, =0.8.0, =3.3.3, =0.0.1, =0.0.2, =0.0.3 - at.ac.ait.lablink.clients:sync 0.0.1 - at.ac.ait.lablink:core 0.0.1 and more Source cves: CVE-2017-15095 Source advisory:...
ai.agnos:reactive-sparql_2.12 (>=0.3.0, <=0.3.1), ai.databand:dbnd-agent (>=0.42.1, <=0.80.6) +5545 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.7.0, <=2.7.9.1)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.7.0, =0.3.0, =0.42.1, =0.42.1, =0.40.2, =0.42.1, =0.2, =0.8.0, =3.3.3, =0.0.1, =0.0.2, =0.0.3 - at.ac.ait.lablink.clients:sync 0.0.1 - at.ac.ait.lablink:core 0.0.1 and more Source cves: CVE-2017-15095 Source advisory: GHSA-H592-38CM-4GG...
ai.grakn:grakn (>=0.17.0, <=0.18.0), ai.grakn:grakn-client (>=0.17.0, <=0.18.0) +13086 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.10)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.18.0 and more Source cves: CVE-2017-15095 Source advisory: OSV:GHSA-H592-38CM-4GGP...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +22188 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0, <=2.6.7.2)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0, =0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =1.4.2, =0.3.2, =0.1.6, =0.1.4-sb1x, =0.7.0, =0.14.0 and more Source cves: CVE-2017-15095...
ai.genauth:genauth-java-sdk (3.1.11), ai.grakn.kgms:client (1.4.3) +5309 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0, <=2.9.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting...
ai.grakn:grakn (>=0.17.0, <=0.18.0), ai.grakn:grakn-client (>=0.17.0, <=0.18.0) +13086 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.8.0, <=2.8.10)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.8.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.16.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.17.0, =0.16.0, =0.18.0 and more Source cves: CVE-2017-15095 Source advisory: GHSA-H592-38CM-4GGP...
ai.genauth:genauth-java-sdk (3.1.11), ai.grakn.kgms:client (1.4.3) +5309 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.9.0, <=2.9.3)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.9.0, =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...
GHSA-H592-38CM-4GGP jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution
jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +22188 more potentially affected by CVE-2017-15095 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0, <=2.6.7.2)
com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0, =0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =1.4.2, =0.3.2, =0.1.6, =0.1.4-sb1x, =0.7.0, =0.14.0 and more Source cves: CVE-2017-15095...
jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the c3p0 gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or Id.MINIMALCLASS ...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Application Runtimes Thorntail 2.2.0 security & bug fix update
An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0), com.github.camel-labs:camel-labs-iot-cloudlet-geofencing (0.1.0) +104 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.10.0, <=2.16.4)
org.apache.camel:camel-jackson MAVEN version =2.10.0, =0.1, =0.0.9, =0.0.19, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.5, =1.5, =1.5, =1.5, =1.9.3 - edu.amherst.acdc:acrepo-template-mustache 1.0.0 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...
com.github.camel-labs:camel-labs-iot-cloudlet-document-driver (0.1.0), com.github.camel-labs:camel-labs-iot-cloudlet-geofencing (0.1.0) +104 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.10.0, <=2.16.4)
org.apache.camel:camel-jackson MAVEN version =2.10.0, =0.1, =0.0.9, =0.0.19, =0.0.8, =0.0.16, =0.0.17, =0.0.16, =1.5, =1.5, =1.5, =1.5, =1.9.3 - edu.amherst.acdc:acrepo-template-mustache 1.0.0 and more Source cves: CVE-2016-8749 Source advisory: GHSA-VVJC-Q5VR-52Q6...
com.zerotoheroes:hs-draft-odds (>=1.0.0, <=1.0.2), com.zerotoheroes:hs-game-converter (>=1.0.0, <=1.0.12) +32 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.17.0, <=2.17.4)
org.apache.camel:camel-jackson MAVEN version =2.17.0, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.7, =1.1.0-m1, =2.2.105, =2.2.105, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.7 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...
com.zerotoheroes:hs-draft-odds (>=1.0.0, <=1.0.2), com.zerotoheroes:hs-game-converter (>=1.0.0, <=1.0.12) +32 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.17.0, <=2.17.4)
org.apache.camel:camel-jackson MAVEN version =2.17.0, =1.0.0, =1.0.0, =1.0.1, =1.0.1, =1.0.7, =1.1.0-m1, =2.2.105, =2.2.105, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.7 and more Source cves: CVE-2016-8749 Source advisory: GHSA-VVJC-Q5VR-52Q6...
ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0, <=0.7.1), cool.pandora:acrepo-exts-image (0.0.3) +279 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.18.0, <=2.18.1)
org.apache.camel:camel-jackson MAVEN version =2.18.0, =0.2.0, =1.0.8, =1.0.8, =1.0.10, =1.1.0, =1.0.8, =1.0.8, =1.1.0, =1.0.8, =1.0.8, =1.0.8, =0.0.7, =0.0.7, =0.0.10 and more Source cves: CVE-2016-8749 Source advisory: OSV:GHSA-VVJC-Q5VR-52Q6...
ca.islandora.alpaca:islandora-indexing-triplestore (>=0.2.0, <=0.7.1), cool.pandora:acrepo-exts-image (0.0.3) +279 more potentially affected by CVE-2016-8749 via org.apache.camel:camel-jackson (>=2.18.0, <=2.18.1)
org.apache.camel:camel-jackson MAVEN version =2.18.0, =0.2.0, =1.0.8, =1.0.8, =1.0.10, =1.1.0, =1.0.8, =1.0.8, =1.1.0, =1.0.8, =1.0.8, =1.0.8, =0.0.7, =0.0.7, =0.0.10 and more Source cves: CVE-2016-8749 Source advisory: GHSA-VVJC-Q5VR-52Q6...
GHSA-VVJC-Q5VR-52Q6 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...