CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3017 matches found

OSV•added 2020/03/04 8:52 p.m.•34 views

GHSA-4W82-R329-3Q67 Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.x before 2.6.7.4, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5 and 2.9.x before 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter...

9.8CVSS7.8AI score0.26587EPSS

SaveExploits5References49

OSV•added 2020/03/04 8:52 p.m.•13 views

GHSA-GWW7-P5W4-WRFV Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.x before 2.6.7.4, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5, and 2.9.x before 2.9.10.2 lacks certain net.sf.ehcache blocking...

9.8CVSS7.1AI score0.0864EPSS

SaveExploits0References37

Github Security Blog•added 2020/03/04 8:52 p.m.•188 views

Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.x before 2.6.7.4, 2.7.x before 2.7.9.7, 2.8.x before 2.8.11.5, and 2.9.x before 2.9.10.2 lacks certain net.sf.ehcache blocking...

9.8CVSS9AI score0.0864EPSS

SaveExploits0References37Affected Software1

attackerkb•added 2020/02/27 10:15 p.m.•12 views

CVE-2018-8878

Information disclosure in Asuswrt-Merlin firmware for ASUS devices older than 384.4 and ASUS firmware before 3.0.0.4.382.50470 for devices allows remote attackers to acquire information on internal network devices' hostnames and MAC addresses by reading the customid variable on the blocking.asp...

5.3CVSS5.5AI score0.01489EPSS

SaveExploits0References2

Trend Micro Simply Security•added 2020/02/25 2:05 p.m.•28 views

In Safe Hands with Trend Micro Home Network Security – Part 3: Testing Its Functions

We continue our four-part series on protecting your home and family. See the links to the previous parts at the end of this blog. As you use more internet-connected devices and smart appliances in your home, it’s of utmost importance to make sure your gadgets are properly protected from malware a...

6.9AI score

SaveExploits0

Tenable Nessus•added 2020/02/24 12:00 a.m.•42 views

EulerOS 2.0 SP5 : sudo (EulerOS-SA-2020-1135)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - DISPUTED In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a...

7.8CVSS7AI score0.19276EPSS

SaveExploits14References4

Microsoft Secure•added 2020/02/20 2:00 p.m.•46 views

Microsoft Threat Protection stops attack sprawl and auto-heals enterprise assets with built-in intelligence and automation

Attackers will cross multiple domains like email, identity, endpoints, and applications to find the point of least resistance. Today’s defense solutions have been designed to protect, detect, and block threats for each domain separately, allowing attackers to exploit the seams and threshold...

0.1AI score

SaveExploits0

Packet Storm•added 2020/02/14 12:00 a.m.•103 views

SprintWork 2.3.1 Local Privilege Escalation

Exploit Title: SprintWork 2.3.1 - Local Privilege Escalation Exploit Author: boku Date: 2020-02-13 Vendor Homepage: https://veridium.net Software Link: https://veridium.net/filesu/spx/exe/SprintWork-Setup.exe Version: 2.3.1 Tested On: Windows 10 32-bit Vulnerability Overview: SprintWork v2.3.1 x8...

7.4AI score

SaveExploits0

ICS•added 2020/02/13 12:00 a.m.•92 views

Schneider Electric Magelis HMI Panels

1. EXECUTIVE SUMMARY CVSS v3 7.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: Magelis HMI Panel Vulnerability: Improper Check for Unusual or Exceptional Conditions 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a...

6.5CVSS6.8AI score0.01049EPSS

SaveExploits1References5

OSV•added 2020/02/10 9:56 p.m.•41 views

CVE-2020-8840