CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

SUSE CVE•added 2023/02/15 3:57 a.m.•1 views

SUSE CVE-2020-14195

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS8.7AI score0.09286EPSS

Exploits0References3

Github Security Blog•added 2020/06/18 2:44 p.m.•54 views

Deserialization of untrusted data in Jackson Databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS3.2AI score0.09286EPSS

Exploits0References12Affected Software1

NVD•added 2020/06/16 4:15 p.m.•22 views

CVE-2020-14195

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS0.09286EPSS

Exploits0References8

Debian CVE•added 2020/06/16 3:7 p.m.•33 views

CVE-2020-14195

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS8.7AI score0.09286EPSS

Exploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by