CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5332 matches found

Veracode•added 2020/06/15 5:12 a.m.•44 views

Remote Code Execution

jackson-databind is vulnerable to remote code execution. It was possible to use the apache-drill gadget type as a serialization gadget through polymorphic typing and execute arbitrary code on the system...

8.1CVSS4.6AI score0.08537EPSS

SaveExploits0References11Affected Software16

Veracode•added 2020/06/15 5:05 a.m.•43 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because it does not filter the untrusted serialization classes weblogic/oracle-aqjms from interaction between serialization gadgets and typing by default...

8.1CVSS4.5AI score0.04458EPSS

SaveExploits0References11Affected Software245

Veracode•added 2020/06/15 4:11 a.m.•47 views

Remote Code Execution (RCE)

jackson-databind is vulnerable to deserialization of untrusted data that can lead to remote code execution. It is possible because the untrusted class com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool was not filtered by default from the interaction between serialization gadgets and...

8.1CVSS4.4AI score0.08108EPSS

SaveExploits0References11Affected Software245

osv_cve•added 2020/06/14 9:15 p.m.•32 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.1CVSS6.5AI score

SaveExploits0References9

osv_debian•added 2020/06/14 9:15 p.m.•6 views

DEBIAN-CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.1CVSS7.1AI score0.08537EPSS

SaveExploits0References1

osv_ubuntu•added 2020/06/14 9:15 p.m.•30 views

UBUNTU-CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.1CVSS6.8AI score0.08537EPSS

SaveExploits0References5

UbuntuCve•added 2020/06/14 9:15 p.m.•57 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.1CVSS6.8AI score0.08537EPSS

SaveExploits0References4

Mend•added 2020/06/14 8:46 p.m.•6 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

9.2CVSS0.08537EPSS

SaveExploits0References17

CVE•added 2020/06/14 8:46 p.m.•464 views

CVE-2020-14060

CVE-2020-14060 affects FasterXML jackson-databind 2.x before 2.9.10.5. The root cause is mishandling of the interaction between serialization gadgets and typing (related to JNDIConnectionPool), enabling deserialization-enabled impact on confidentiality, integrity, and availability. The IBM X-Forc...

8.1CVSS8.6AI score0.08537EPSS

SaveExploits0References9Affected Software1

Debian CVE•added 2020/06/14 8:46 p.m.•55 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.1CVSS7.7AI score0.08537EPSS

SaveExploits0

Cvelist•added 2020/06/14 8:46 p.m.•54 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

8.7AI score0.08537EPSS

SaveExploits0References9

NVD•added 2020/06/14 8:15 p.m.•47 views

CVE-2020-14061

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and...

8.1CVSS0.04458EPSS

SaveExploits0References9

osv_cve•added 2020/06/14 8:15 p.m.•38 views

CVE-2020-14061

8.1CVSS6.5AI score

SaveExploits0References9

osv_cve•added 2020/06/14 8:15 p.m.•41 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS6.5AI score

SaveExploits0References9

NVD•added 2020/06/14 8:15 p.m.•25 views

CVE-2020-14062

8.1CVSS0.08108EPSS

SaveExploits0References9

osv_ubuntu•added 2020/06/14 8:15 p.m.•42 views

UBUNTU-CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References5

UbuntuCve•added 2020/06/14 8:15 p.m.•54 views

CVE-2020-14062

8.1CVSS6.8AI score0.08108EPSS

SaveExploits0References4

Prion•added 2020/06/14 8:15 p.m.•39 views

Memory corruption

6.8CVSS8.6AI score0.04458EPSS

SaveExploits0References9Affected Software14

UbuntuCve•added 2020/06/14 8:15 p.m.•39 views

CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References4

osv_ubuntu•added 2020/06/14 8:15 p.m.•23 views

UBUNTU-CVE-2020-14062

8.1CVSS6.8AI score0.08108EPSS

SaveExploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by