Lucene search
+L

5340 matches found

attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•9 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS7.4AI score0.18921EPSS
SaveExploits0References27
attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•8 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS7.4AI score0.04575EPSS
SaveExploits0References29
attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•8 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.4AI score0.18383EPSS
SaveExploits0References42
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•69 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.1AI score0.18383EPSS
SaveExploits0References4
Prion
Prion
•added 2020/03/02 4:15 a.m.•38 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

6.8CVSS9.2AI score0.18383EPSS
SaveExploits0References23Affected Software16
Prion
Prion
•added 2020/03/02 4:15 a.m.•38 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

6.8CVSS9.2AI score0.04575EPSS
SaveExploits0References17Affected Software31
Prion
Prion
•added 2020/03/02 4:15 a.m.•41 views

Code injection

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

6.8CVSS9.2AI score0.18921EPSS
SaveExploits0References16Affected Software25
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•60 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS7.1AI score0.04575EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•55 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS7.1AI score0.18921EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2020/03/02 4:15 a.m.•12 views

UBUNTU-CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS5.8AI score0.04575EPSS
SaveExploits0References5
CVE
CVE
•added 2020/03/02 3:59 a.m.•605 views

CVE-2020-9546

CVE-2020-9546 affects FasterXML jackson-databind 2.x before 2.9.10.4, where serialization gadgets and typing interactions involving org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig can lead to deserialization issues. The IBM/Cloudera bulletin references the same CVE and lists a high impact...

9.8CVSS9.2AI score0.04575EPSS
SaveExploits0References17Affected Software1
Cvelist
Cvelist
•added 2020/03/02 3:59 a.m.•63 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.3AI score0.04575EPSS
SaveExploits0References17
Debian CVE
Debian CVE
•added 2020/03/02 3:59 a.m.•57 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS8.9AI score0.04575EPSS
SaveExploits0
Mend
Mend
•added 2020/03/02 3:59 a.m.•32 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS0.04575EPSS
SaveExploits0References31
Mend
Mend
•added 2020/03/02 3:59 a.m.•4 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS0.18383EPSS
SaveExploits0References44
Vulnrichment
Vulnrichment
•added 2020/03/02 3:59 a.m.•6 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

0.18383EPSS
SaveExploits0References23
EUVD
EUVD
•added 2020/03/02 3:59 a.m.•11 views

EUVD-2020-0438

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS8.6AI score0.18383EPSS
SaveExploits0References65
Debian CVE
Debian CVE
•added 2020/03/02 3:59 a.m.•60 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS8.9AI score0.18383EPSS
SaveExploits0
CVE
CVE
•added 2020/03/02 3:59 a.m.•623 views

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

9.8CVSS9.1AI score0.18383EPSS
SaveIn wildExploits0References23Affected Software1
Cvelist
Cvelist
•added 2020/03/02 3:58 a.m.•50 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.3AI score0.18921EPSS
SaveExploits0References16
Rows per page
Query Builder