Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

5337 matches found

osv_cve
osv_cve•added 2020/03/18 10:15 p.m.•28 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.5AI score
SaveExploits0References8
osv_cve
osv_cve•added 2020/03/18 10:15 p.m.•41 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS6.5AI score
SaveExploits0References8
NVD
NVD•added 2020/03/18 10:15 p.m.•42 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS9AI score0.03059EPSS
SaveExploits0References8
osv_debian
osv_debian•added 2020/03/18 10:15 p.m.•6 views

DEBIAN-CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS7.1AI score0.08028EPSS
SaveExploits0References1
NVD
NVD•added 2020/03/18 10:15 p.m.•40 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS9AI score0.08028EPSS
SaveExploits0References8
Prion
Prion•added 2020/03/18 10:15 p.m.•31 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.8CVSS9AI score0.03059EPSS
SaveExploits0References8Affected Software30
osv_ubuntu
osv_ubuntu•added 2020/03/18 10:15 p.m.•21 views

UBUNTU-CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.9AI score0.03059EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve•added 2020/03/18 10:15 p.m.•47 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.9AI score0.03059EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu•added 2020/03/18 10:15 p.m.•12 views

UBUNTU-CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS6.9AI score0.08028EPSS
SaveExploits0References5
Prion
Prion•added 2020/03/18 10:15 p.m.•36 views

Code injection

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

6.8CVSS9AI score0.08028EPSS
SaveExploits0References8Affected Software30
UbuntuCve
UbuntuCve•added 2020/03/18 10:15 p.m.•39 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS6.9AI score0.08028EPSS
SaveExploits0References4
CVE
CVE•added 2020/03/18 9:17 p.m.•509 views

CVE-2020-10672

CVE-2020-10672 affects FasterXML jackson-databind 2.x prior to 2.9.10.4. The issue arises from deserialization gadget/typing interaction (related to org.apache. Aries transaction JMS XaPooledConnectionFactory), enabling high-severity impact on data confidentiality/integrity/availability. Connecte...

8.8CVSS8.3AI score0.03059EPSS
SaveExploits0References8Affected Software1
Vulnrichment
Vulnrichment•added 2020/03/18 9:17 p.m.•31 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.7AI score0.03059EPSS
SaveExploits0References8
Cvelist
Cvelist•added 2020/03/18 9:17 p.m.•50 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

9.1AI score0.03059EPSS
SaveExploits0References8
Mend
Mend•added 2020/03/18 9:17 p.m.•5 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS0.03059EPSS
SaveExploits0References15
Debian CVE
Debian CVE•added 2020/03/18 9:17 p.m.•47 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS8.4AI score0.03059EPSS
SaveExploits0
CVE
CVE•added 2020/03/18 9:17 p.m.•481 views

CVE-2020-10673

CVE-2020-10673 affects FasterXML jackson-databind 2.x prior to 2.9.10.4. The IBM bulletin and the consolidated Jira/Advisory in connected docs describe a deserialization issue where interaction between serialization gadgets and typing (related to com.caucho.config.types.ResourceRef, aka caucho-qu...

8.8CVSS8.3AI score0.08028EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist•added 2020/03/18 9:17 p.m.•37 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

9.1AI score0.08028EPSS
SaveExploits0References8
Mend
Mend•added 2020/03/18 9:17 p.m.•5 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

8.8CVSS0.08028EPSS
SaveExploits0References14
Vulnrichment
Vulnrichment•added 2020/03/18 9:17 p.m.•28 views

CVE-2020-10673

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef aka caucho-quercus...

6.7AI score0.08028EPSS
SaveExploits0References8
Rows per page
Query Builder