Lucene search
K

7696 matches found

OSV
OSV
added 2022/03/12 12:0 a.m.811 views

GHSA-57J2-W4CX-62H2 Deeply nested json in jackson-databind

jackson-databind is a data-binding package for the Jackson Data Processor. jackson-databind allows a Java stack overflow exception and denial of service via a large depth of nested objects...

7.5CVSS7.3AI score0.00474EPSS
Exploits1References16
OSV
OSV
added 2022/03/11 7:15 a.m.2 views

DEBIAN-CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS6.7AI score0.00474EPSS
Exploits1References1
NVD
NVD
added 2022/03/11 7:15 a.m.20 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS0.00474EPSS
Exploits1References7
Veracode
Veracode
added 2022/03/11 2:35 a.m.21 views

Insecure Access Control

Icinga Web 2 has insecure access control. Users may still have access to decommissioned service objects...

5.3CVSS4.1AI score0.00334EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2022/03/11 12:0 a.m.2 views

FasterXML jackson-databind 缓冲区错误漏洞

FasterXML jackson-databind is a JAVA-based data formats such as XML and JSON and JAVA objects can be converted to the library . Jackson can easily convert Java objects into json objects and xml documents , the same can also be json, xml into Java objects . FasterXML jackson-databind 2.13.0 before...

7.5CVSS7AI score0.00474EPSS
Exploits1References47
Cvelist
Cvelist
added 2022/03/11 12:0 a.m.25 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.7AI score0.00474EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/03/11 12:0 a.m.1 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

6.8AI score0.00474EPSS
Exploits1References7
Debian CVE
Debian CVE
added 2022/03/11 12:0 a.m.66 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS7.8AI score0.00474EPSS
Exploits1
NVD
NVD
added 2022/03/10 5:48 p.m.16 views

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS0.00403EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:48 p.m.1 views

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS6.1AI score0.00403EPSS
Exploits0References5
OSV
OSV
added 2022/03/10 5:48 p.m.0 views

DEBIAN-CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS5.6AI score0.00403EPSS
Exploits0References1
OSV
OSV
added 2022/03/10 5:48 p.m.18 views

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS8.6AI score
Exploits0References4
OSV
OSV
added 2022/03/10 5:48 p.m.1 views

UBUNTU-CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS6AI score0.00403EPSS
Exploits0References5
Prion
Prion
added 2022/03/10 5:48 p.m.17 views

Information disclosure

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5CVSS5.9AI score0.00403EPSS
Exploits0References4Affected Software2
UbuntuCve
UbuntuCve
added 2022/03/10 5:48 p.m.39 views

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS6.1AI score0.00403EPSS
Exploits0References4
OSV
OSV
added 2022/03/10 5:46 p.m.2 views

CVE-2022-24398

Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted...

6.5CVSS5.8AI score0.00285EPSS
Exploits0References2
NVD
NVD
added 2022/03/10 5:46 p.m.16 views

CVE-2022-24398

Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted...

6.5CVSS0.00285EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/03/10 5:46 p.m.4 views

CVE-2022-24398

Under certain conditions SAP Business Objects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access information which would otherwise be restricted...

6.5CVSS6.6AI score0.00285EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/03/10 4:58 a.m.48 views

CVE-2022-26847

SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about editorial objects...

5.3CVSS5.2AI score0.00403EPSS
Exploits0
CNNVD
CNNVD
added 2022/03/10 12:0 a.m.4 views

SPIP 信息泄露漏洞

SPIP is a Web-based content distribution system used primarily for online collaboration. A security vulnerability exists in SPIP, which stems from a web-based system or product that does not properly restrict access to resources from unauthorized roles. An unauthenticated attacker could use this...

5.3CVSS5.6AI score0.00403EPSS
Exploits0References9
Rows per page
Query Builder