CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5318 matches found

osv_debian•added 2021/01/07 12:15 a.m.•9 views

DEBIAN-CVE-2020-36179

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.1CVSS7.5AI score0.17065EPSS

SaveExploits2References1

osv_debian•added 2021/01/07 12:15 a.m.•11 views

DEBIAN-CVE-2020-36182

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.1CVSS7.1AI score0.04092EPSS

SaveExploits2References1

osv_cve•added 2021/01/07 12:15 a.m.•50 views

CVE-2020-36182

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.1CVSS7.1AI score0.04092EPSS

SaveExploits2References10

osv_cve•added 2021/01/07 12:15 a.m.•30 views

CVE-2020-36180

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.1CVSS7.1AI score

SaveExploits0References10

attackerkb•added 2021/01/07 12:15 a.m.•9 views

CVE-2020-36179

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.8AI score0.17065EPSS

SaveExploits2References13

Prion•added 2021/01/07 12:15 a.m.•36 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

6.8CVSS8.6AI score0.04092EPSS

SaveExploits2References10Affected Software43

Prion•added 2021/01/07 12:15 a.m.•41 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

6.8CVSS8.6AI score0.17065EPSS

SaveExploits2References11Affected Software41

osv_ubuntu•added 2021/01/07 12:15 a.m.•14 views

UBUNTU-CVE-2020-36179

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.17065EPSS

SaveExploits2References4

UbuntuCve•added 2021/01/07 12:15 a.m.•49 views

CVE-2020-36179

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.17065EPSS

SaveExploits2References3

UbuntuCve•added 2021/01/07 12:15 a.m.•41 views

CVE-2020-36180

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.04092EPSS

SaveExploits2References3

UbuntuCve•added 2021/01/07 12:15 a.m.•46 views

CVE-2020-36182

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.04092EPSS

SaveExploits2References3

UbuntuCve•added 2021/01/07 12:15 a.m.•37 views

CVE-2020-36183

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool...

8.1CVSS6.9AI score0.04972EPSS

SaveExploits1References3

osv_ubuntu•added 2021/01/07 12:15 a.m.•15 views

UBUNTU-CVE-2020-36182

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.04092EPSS

SaveExploits2References4

osv_ubuntu•added 2021/01/07 12:15 a.m.•14 views

UBUNTU-CVE-2020-36183

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool...

8.1CVSS6.9AI score0.04972EPSS

SaveExploits1References4

osv_ubuntu•added 2021/01/07 12:15 a.m.•22 views

UBUNTU-CVE-2020-36180

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.04092EPSS

SaveExploits2References4

attackerkb•added 2021/01/07 12:15 a.m.•8 views

CVE-2020-36180

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.8AI score0.04092EPSS

SaveExploits2References11

Rapid7 Vulnerability Database (full)•added 2021/01/07 12:00 a.m.•7 views

CVE-2020-36179: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS5.9AI score0.17065EPSS

SaveExploits2References22

Rapid7 Vulnerability Database (full)•added 2021/01/07 12:00 a.m.•8 views

CVE-2020-36180: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS...

8.8CVSS5.9AI score0.04092EPSS

SaveExploits2References22

Amazon•added 2021/01/07 12:00 a.m.•59 views

Medium: java-1.8.0-openjdk

Issue Overview: Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with networ...

5.8CVSS5AI score0.03758EPSS

SaveExploits0

NVD•added 2021/01/06 11:15 p.m.•34 views

CVE-2020-36184

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

8.8CVSS8.7AI score0.08288EPSS

SaveExploits1References10

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by