CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

Github Security Blog•added 2018/10/16 11:13 p.m.•54 views

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's camel-jackson and camel-jacksonxml components are vulnerable to Java object de-serialisation vulnerability. Camel allows to specify such a type through the 'CamelJacksonUnmarshalType' property. De-serializing untrusted data can lead to security flaws as demonstrated in various...

9.8CVSS9.5AI score0.12248EPSS

Exploits1References23Affected Software1

Github Security Blog•added 2018/10/16 11:5 p.m.•27 views

Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation

The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

9.8CVSS2.1AI score0.06481EPSS

Exploits3References14Affected Software1

NVD•added 2017/11/15 3:29 p.m.•13 views

CVE-2017-12634

9.8CVSS9.4AI score0.06481EPSS

Exploits3References6

Prion•added 2017/11/15 3:29 p.m.•18 views

Design/Logic Flaw

7.5CVSS9.4AI score0.06481EPSS

Exploits3References6Affected Software1

OSV•added 2017/11/15 3:29 p.m.•20 views

CVE-2017-12634

9.8CVSS6.8AI score0.06481EPSS

Exploits3References6

Prion•added 2017/11/15 3:29 p.m.•22 views

Design/Logic Flaw

The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws...

7.5CVSS9.3AI score0.03414EPSS

Exploits3References6Affected Software1

NVD•added 2017/11/15 3:29 p.m.•15 views

CVE-2017-12633

9.8CVSS9.5AI score0.03414EPSS

Exploits3References6