Lucene search
K

181 matches found

Github Security Blog
Github Security Blog
added 2022/03/12 12:0 a.m.562 views

Deeply nested json in jackson-databind

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects...

7.5CVSS8AI score0.00474EPSS
Exploits1References16Affected Software1
Fedora
Fedora
added 2021/12/23 1:25 a.m.22 views

[SECURITY] Fedora 34 Update: tang-11-1.fc34

Tang is a small daemon for binding data to the presence of a third party...

7.5CVSS1.7AI score0.00477EPSS
Exploits0
Fedora
Fedora
added 2021/02/10 1:30 a.m.76 views

[SECURITY] Fedora 32 Update: jackson-databind-2.10.5.1-1.fc32

The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...

7.5CVSS2.5AI score0.00075EPSS
Exploits0
CNVD
CNVD
added 2021/01/07 12:0 a.m.5 views

Unspecified vulnerability in FasterXML jackson-databind (CNVD-2021-03342)

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. FasterXML jackson-databind exists with the FasterXML jackson-databind suffers from a security vulnerability, no detailed vulnerability details are provided at this time...

8.8CVSS9.2AI score0.05412EPSS
Exploits2References1
CNVD
CNVD
added 2021/01/07 12:0 a.m.1 views

Unspecified vulnerability in FasterXML jackson-databind (CNVD-2021-03346)

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. A security vulnerability exists in FasterXML jackson-databind. No details of the vulnerability are provided at this time...

8.1CVSS9.1AI score0.02715EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/01/06 12:0 a.m.2 views

FasterXML jackson-databind 代码问题漏洞

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. FasterXML jackson-databind has a security vulnerability, and no detailed vulnerability details are provided at this time...

8.8CVSS6.9AI score0.0691EPSS
Exploits1References31
CNNVD
CNNVD
added 2021/01/06 12:0 a.m.4 views

FasterXML jackson-databind 代码问题漏洞

FasterXML jackson-databind is a generic data binding package for Jackson 2.x. A security vulnerability exists in FasterXML jackson-databind. No details of the vulnerability are provided at this time...

8.1CVSS7AI score0.02061EPSS
Exploits1References31
CNVD
CNVD
added 2020/12/25 12:0 a.m.3 views

Command execution vulnerability exists in FasterXML jackson-databind (CNVD-2021-00625)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to execute arbitrary commands...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/12/25 12:0 a.m.3 views

Command execution vulnerability exists in FasterXML jackson-databind (CNVD-2021-00629)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to execute arbitrary commands...

7.9AI score
Exploits0
RedHat Linux
RedHat Linux
added 2020/07/28 3:54 p.m.1 views

jackson-databind: Serialization gadgets in com.zaxxer.hikari.HikariConfig

A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the HikariConfig gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when @JsonTypeInfo is using Id.CLASS or...

9.8CVSS7AI score0.06292EPSS
Exploits1References4
CNVD
CNVD
added 2020/06/15 12:0 a.m.1 views

FasterXML jackson-databind code issue vulnerability (CNVD-2020-53535)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A security vulnerability exists in FasterXML jackson-databind version 2.x prior to 2.9.10.5. No detailed vulnerability details are provided at...

8.1CVSS8.6AI score0.09636EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.30 views

Fedora Update for jackson-annotations FEDORA-2019-99ff6aa32c

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.3AI score0.51266EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.42 views

Fedora Update for jackson-databind FEDORA-2019-cf87377f5f

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS10AI score0.06292EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.24 views

Fedora Update for jackson-annotations FEDORA-2019-cf87377f5f

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS10AI score0.06292EPSS
Exploits1References2
Fedora
Fedora
added 2019/10/26 5:30 p.m.44 views

[SECURITY] Fedora 31 Update: jackson-annotations-2.10.0-1.fc31

Core annotations used for value types, used by Jackson data-binding package...

9.8CVSS2.2AI score0.06292EPSS
Exploits1
Fedora
Fedora
added 2019/10/26 5:30 p.m.34 views

[SECURITY] Fedora 31 Update: jackson-databind-2.10.0-1.fc31

The general-purpose data-binding functionality and tree-model for Jackson D ata Processor. It builds on core streaming parser/generator package, and uses Jackson Annotations for configuration...

9.8CVSS2.5AI score0.06292EPSS
Exploits1
OSV
OSV
added 2019/10/12 9:15 p.m.1 views

DEBIAN-CVE-2019-17531

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint and the service has the apache-log4j-extra version 1.2.x jar in the classpath, and an...

9.8CVSS8.2AI score0.0119EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2019/10/12 12:0 a.m.37 views

Fedora Update for jackson-annotations FEDORA-2019-b171554877

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS10AI score0.06292EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2019/09/23 12:0 a.m.27 views

Fedora Update for jackson-databind FEDORA-2019-ae6a703b8f

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.3AI score0.51266EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2019/09/23 12:0 a.m.33 views

Fedora Update for jackson-annotations FEDORA-2019-fb23eccc03

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.3AI score0.51266EPSS
Exploits4References2
Rows per page
Query Builder