CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2020/06/19 11:56 a.m.•52 views

CVE-2020-14195

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Mitigation Th...

6.8CVSS2.8AI score0.04549EPSS

SaveExploits0References3

OSV•added 2020/06/16 4:15 p.m.•40 views

CVE-2020-14195

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS6.5AI score

SaveExploits0References8

UbuntuCve•added 2020/06/16 4:15 p.m.•42 views

CVE-2020-14195

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS7.1AI score0.04549EPSS

SaveExploits0References4

Rapid7 Vulnerability Database (full)•added 2020/06/16 12:00 a.m.•3 views

CVE-2020-14195: Deserialization of Untrusted Data

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory aka org.jsecurity...

8.1CVSS5.9AI score0.04549EPSS

SaveExploits0References18

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by