CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2020/04/23 4:32 p.m.•77 views

jackson-databind mishandles the interaction between serialization gadgets and typing

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS3.5AI score0.39493EPSS

Exploits0References13Affected Software1

NVD•added 2020/03/18 10:15 p.m.•32 views

CVE-2020-10672

8.8CVSS9AI score0.39493EPSS

Exploits0References8

Prion•added 2020/03/18 10:15 p.m.•19 views

Design/Logic Flaw

6.8CVSS9AI score0.39493EPSS

Exploits0References8Affected Software30

Vulnrichment•added 2020/03/18 9:17 p.m.•28 views

CVE-2020-10672

6.7AI score0.39493EPSS

Exploits0References8

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by