Linux Distros Unpatched Vulnerability : CVE-2020-10650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or...

Security Bulletin: IBM Security Guardium is affected by a remote code execution vulnerability (CVE-2020-10650)

Summary IBM Security Guardium uses jackson-databind for XML processing. FasterXML jackson-databind has a remote code execution vulnerability. IBM Security Guardium has addressed the issue by updating the affected component. Vulnerability Details CVEID:CVE-2020-10650 DESCRIPTION: FasterXML...

Debian dla-3407 : libjackson2-databind-java - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3407 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3407-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 3407-1] jackson-databind security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3407-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 30, 2023 https://wiki.debian.org/LTS -...

Security Bulletin: IBM Security Verify Governance is vulnerable to arbitrary code execution (CVE-2020-10650)

Summary IBM Security Verify Governance is vulnerable to arbitrary code execution due to an issue in FasterXML jackson-databind, which ISVG uses for XML processing. The issue was addressed by upgrading the affected package. Vulnerability Details CVEID:CVE-2020-10650 DESCRIPTION: FasterXML...

SUSE CVE-2020-10650

A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and...

CVE-2020-10650

creationtimestamp| type| source ---|---|--- 2022-12-26 22:40:58+00:00| seen| https://t.me/cibsecurity/55368 2023-12-09 23:54:59+00:00| seen| https://t.me/arpsyndicate/1580 2025-04-14 16:53:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11647 2025-06-26 21:02:24+00:00|...

CVE-2020-10650

A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and...

CVE-2020-10650

CVE-2020-10650 is a deserialization vulnerability in FasterXML jackson-databind up to 2.9.10.4 that allowed unauthenticated code execution via Ignite-JTA or Quartz-core gadgets (e.g., CacheJndiTmLookup/CacheJndiTmFactory; JNDIConnectionProvider). Technical details across connected sources confirm...

OESA-2021-1129 subversion security update

Subversion exists to be universally recognized and adopted as an open-source, centralized version control system characterized by its reliability as a safe haven for valuable data; the simplicity of its model and usage; and its ability to support the needs of a wide variety of users and projects,...