CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3727 matches found

Cvelist•added 2020/03/02 3:59 a.m.•63 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.3AI score0.04613EPSS

SaveExploits0References17

Vulnrichment•added 2020/03/02 3:59 a.m.•5 views

CVE-2020-9546

0.04613EPSS

SaveExploits0References17

Mend•added 2020/03/02 3:59 a.m.•4 views

CVE-2020-9546

9.8CVSS0.04613EPSS

SaveExploits0References31

Debian CVE•added 2020/03/02 3:59 a.m.•57 views

CVE-2020-9546

9.8CVSS8.9AI score0.04613EPSS

SaveExploits0

Mend•added 2020/03/02 3:59 a.m.•2 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS0.18383EPSS

SaveExploits0References44

Cvelist•added 2020/03/02 3:59 a.m.•47 views

CVE-2020-9547

9.3AI score0.18383EPSS

SaveExploits0References23

EUVD•added 2020/03/02 3:59 a.m.•11 views

EUVD-2020-0438

9.8CVSS8.6AI score0.18383EPSS

SaveExploits0References65

Vulnrichment•added 2020/03/02 3:59 a.m.•5 views

CVE-2020-9547

0.18383EPSS

SaveExploits0References23

CVE•added 2020/03/02 3:59 a.m.•617 views

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

9.8CVSS9.1AI score0.18383EPSS

SaveIn wildExploits0References23Affected Software1

Debian CVE•added 2020/03/02 3:59 a.m.•59 views

CVE-2020-9547

9.8CVSS8.9AI score0.18383EPSS

SaveExploits0

Cvelist•added 2020/03/02 3:58 a.m.•50 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.3AI score0.18921EPSS

SaveExploits0References16

Mend•added 2020/03/02 3:58 a.m.•2 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS0.18921EPSS

SaveExploits0References31

CVE•added 2020/03/02 3:58 a.m.•563 views

CVE-2020-9548

CVE-2020-9548 affects Cloudera Data Platform Private Cloud Base (IBM) 7.1.9. It is a deserialization vulnerability in FasterXML jackson-databind 2.x up to 2.9.10.3/4 where interaction between serialization gadgets and typing (relating to br.com.anteros.dbcp.AnterosDBCPConfig) can lead to remote c...

9.8CVSS9.1AI score0.18921EPSS

SaveIn wildExploits0References16Affected Software1

Debian CVE•added 2020/03/02 3:58 a.m.•90 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS8.9AI score0.18921EPSS

SaveExploits0

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•3 views

CVE-2020-9546: Deserialization of Untrusted Data

9.8CVSS7.9AI score0.04613EPSS

SaveExploits0References36

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•2 views

CVE-2019-14892: Deserialization of Untrusted Data

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code...

9.8CVSS7.8AI score0.05622EPSS

SaveExploits0References11

Positive Technologies•added 2020/03/02 12:00 a.m.•14 views

PT-2020-4105

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions prior to 2.9.10 and 2.10.0 Description: A flaw in FasterXML jackson-databind allows polymorphic deserialization of malicious objects using the xalan JNDI gadget when used with polymorphic type handling...

10CVSS7.1AI score0.04091EPSS

SaveExploits0References24

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•3 views

CVE-2019-14893: Deserialization of Untrusted Data

A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as enableDefaultTyping or when...

9.8CVSS7.8AI score0.04091EPSS

SaveExploits0References15

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•3 views

CVE-2020-9547: Deserialization of Untrusted Data

9.8CVSS8.1AI score0.18383EPSS

SaveExploits0References16

Rapid7 Vulnerability Database (full)•added 2020/03/02 12:00 a.m.•3 views

CVE-2020-9548: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS8.1AI score0.18921EPSS

SaveExploits0References16

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by