3863 matches found
Exploit for Deserialization of Untrusted Data in Alibaba Fastjson
CVE-2022-25845-In-Spring 主要依赖 1. jackson 2. commons-io 快...
Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8
Summary Third party reported 'Stored XSS' and 'CSRF' issues, Apache Tomcat, Apache ActiveMQ, CKEditor, libcURL, xmlbeans, scala-library, json-smart, jna-platform, jackson-databind, commons-io, shiro-core, commons-net, snappy-java, xercesImpl are identified as vulnerable components with multiple...
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
Summary IBM has released the below fix for IBM Db2® on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data in response to multiple vulnerabilities found in multiple components.This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details...
RHSA-2020:4173 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
Security Bulletin: Vulnerabilities in FasterXML jackson-databind and other packages affect IBM watsonx.data
Summary FasterXML jackson-databind, multiple Huawei products, multiple Oracle products, Guava, Google Protocol Buffers, protobuf-core, Netty, JetBrains Kotlin, netplex JSON Smart, Jettison, Eclipse Jetty, SnakeYaml and Perl have vulnerabilities that can affect watsonx.data. Vulnerability Details...
jackson-databind: denial of service via cylic dependencies
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...
Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx.data
Summary FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization. This could affect IBM watsonx.data. Vulnerability Details CVEID:CVE-2020-36188 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to...
Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx.data
Summary There are multiple CVEs fixed for this Security Bulletin. For the FasterXML jackson-databind CVEs, jackson-databind could allow a remote attacker to execute arbitrary code on the system. For CVE-2017-7525, Apache Struts could also allow a remote attacker to execute arbitrary code on the...
Security Bulletin: Vulnerability in jackson-databind affects IBM watsonx.data
Summary FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system and could allow a remote attacker to obtain sensitive information. This can affect watsonx.data. This can affect IBM watsonx.data Vulnerability Details CVEID:CVE-2019-12384 DESCRIPTION:...
Security Bulletin: Vulnerabilities in jackson-databind affect IBM watsonx.data
Summary FasterXML jackson-databind has multiple vulnerabilities including the possibility of remote attackers executing arbitrary code on the system. These can affect IBM watsonx.data. Vulnerability Details CVEID:CVE-2017-15095 DESCRIPTION: Jackson Library could allow a remote attacker to execute...
RHSA-2017:1840 Red Hat Security Advisory: devtoolset-4-jackson-databind security update
Bulletin has no description...
RHSA-2018:0342 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2020:2320 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2020:1523 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2019:1820 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2020:4312 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2019:0782 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...
RHSA-2019:4192 Red Hat Security Advisory: rh-maven35-jackson-databind security update
Bulletin has no description...