Lucene search
+L

8 matches found

Atlassian
Atlassian
•added 2024/04/09 1:50 a.m.•65 views

Injection com.fasterxml.jackson.core:jackson-databind Dependency in Crowd Data Center and Server

This High severity com.fasterxml.jackson.core:jackson-databind Dependency vulnerability was introduced in versions 5.0.0, 5.1.0, and 5.2.0 of Crowd Data Center and Server. This com.fasterxml.jackson.core:jackson-databind Dependency vulnerability, with a CVSS Score of 8.8 and a CVSS Vector of...

8.8CVSS6.5AI score0.03059EPSS
SaveExploits0
NVD
NVD
•added 2020/03/18 10:15 p.m.•41 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS9AI score0.03059EPSS
SaveExploits0References8
OSV
OSV
•added 2020/03/18 10:15 p.m.•27 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.5AI score
SaveExploits0References8
Prion
Prion
•added 2020/03/18 10:15 p.m.•30 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.8CVSS9AI score0.03059EPSS
SaveExploits0References8Affected Software30
UbuntuCve
UbuntuCve
•added 2020/03/18 10:15 p.m.•47 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS6.9AI score0.03059EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2020/03/18 9:17 p.m.•30 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

6.7AI score0.03059EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2020/03/18 9:17 p.m.•49 views

CVE-2020-10672

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

9.1AI score0.03059EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/18 12:00 a.m.•5 views

CVE-2020-10672: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory aka aries.transaction.jms...

8.8CVSS7.7AI score0.03059EPSS
SaveExploits0References16
Rows per page
Query Builder