CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

891 matches found

NVD•added 2021/01/06 11:15 p.m.•21 views

CVE-2020-36185

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS8.7AI score0.02715EPSS

Exploits1References10

NVD•added 2021/01/06 11:15 p.m.•17 views

CVE-2020-36189

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource...

8.1CVSS8.7AI score0.03941EPSS

Exploits1References10

OSV•added 2021/01/06 11:15 p.m.•23 views

CVE-2020-36187

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

8.1CVSS7.1AI score

Exploits0References10

OSV•added 2021/01/06 11:15 p.m.•25 views

CVE-2020-36186

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

8.1CVSS7.1AI score

Exploits0References10

OSV•added 2021/01/06 11:15 p.m.•27 views

CVE-2020-36188

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

8.1CVSS7.1AI score

Exploits0References10

NVD•added 2021/01/06 11:15 p.m.•16 views

CVE-2020-36181

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS8.7AI score0.05412EPSS

Exploits2References10

OSV•added 2021/01/06 11:15 p.m.•20 views

CVE-2020-36181

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.1CVSS7.1AI score

Exploits0References10

UbuntuCve•added 2021/01/06 11:15 p.m.•28 views

CVE-2020-36181

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

8.8CVSS6.9AI score0.05412EPSS

Exploits2References3

Prion•added 2021/01/06 11:15 p.m.•28 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

6.8CVSS8.6AI score0.02715EPSS

Exploits1References10Affected Software43

Prion•added 2021/01/06 11:15 p.m.•25 views

Code injection

6.8CVSS8.6AI score0.03941EPSS

Exploits1References10Affected Software38

UbuntuCve•added 2021/01/06 11:15 p.m.•26 views

CVE-2020-36189

8.1CVSS7.1AI score0.03941EPSS

Exploits1References3

Prion•added 2021/01/06 11:15 p.m.•25 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

6.8CVSS8.6AI score0.02413EPSS

Exploits1References10Affected Software43

Prion•added 2021/01/06 11:15 p.m.•19 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

6.8CVSS8.6AI score0.02147EPSS

Exploits1References10Affected Software43

UbuntuCve•added 2021/01/06 11:15 p.m.•27 views

CVE-2020-36188

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

8.1CVSS7.1AI score0.0944EPSS

Exploits1References3

UbuntuCve•added 2021/01/06 11:15 p.m.•31 views

CVE-2020-36185

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS6.9AI score0.02715EPSS

Exploits1References3

UbuntuCve•added 2021/01/06 11:15 p.m.•32 views

CVE-2020-36187

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

8.1CVSS6.9AI score0.02147EPSS

Exploits1References3

Prion•added 2021/01/06 11:15 p.m.•26 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

6.8CVSS8.6AI score0.0691EPSS

Exploits1References10Affected Software43

Prion•added 2021/01/06 11:15 p.m.•28 views

Code injection

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...

6.8CVSS8.6AI score0.0944EPSS

Exploits1References10Affected Software43

UbuntuCve•added 2021/01/06 11:15 p.m.•22 views

CVE-2020-36186

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.02413EPSS

Exploits1References3

Prion•added 2021/01/06 11:15 p.m.•22 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS...

6.8CVSS8.6AI score0.05412EPSS

Exploits2References10Affected Software43

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by