Lucene search
K

27 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.6 views

Astra Linux - уязвимость в jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

8.8CVSS7AI score0.07471EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.8 views

Unity Linux 20.1060e / 20.1070e Security Update: jackson-databind (UTSA-2026-017591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017591 advisory. FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.1CVSS6.9AI score0.02623EPSS
Exploits1References4
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в jackson-databind

FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.04249EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2603

Malware in sbrugna...

8.1CVSS7.8AI score0.04249EPSS
Exploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2393

Malware in sbrugna...

8.1CVSS7.8AI score0.02623EPSS
Exploits1References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-2550

Malware in sbrugna...

8.8CVSS7.8AI score0.07471EPSS
Exploits1References18
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2020-36186

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to...

8.1CVSS6.9AI score0.02623EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:50 a.m.1 views

SUSE CVE-2020-36186

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

8.1CVSS8AI score0.02623EPSS
Exploits1References3
OSV
OSV
added 2021/12/09 7:16 p.m.0 views

GHSA-M6X4-97WX-4Q27 Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.07471EPSS
Exploits1References13
OSV
OSV
added 2021/12/09 7:15 p.m.0 views

GHSA-WH8G-3J2C-RQJ5 Serialization gadgets exploit in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.04249EPSS
Exploits1References13
Github Security Blog
Github Security Blog
added 2021/11/19 8:13 p.m.50 views

Unsafe Deserialization in jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

8.1CVSS8.6AI score0.02623EPSS
Exploits1References13Affected Software1
Veracode
Veracode
added 2021/01/08 6:11 a.m.27 views

Arbitrary Code Execution

jackson-databind is vulnerable to remote code execution RCE. The vulnerability exists through the lack of sanitization of the org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource class through deserialization...

8.1CVSS4.9AI score0.07471EPSS
Exploits1References10Affected Software3
Veracode
Veracode
added 2021/01/08 5:55 a.m.19 views

Arbitrary Code Execution

jackson-databind is vulnerable to arbitrary code execution. The vulnerability exists through the lack of sanitization of the org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource class through deserialization...

8.1CVSS4.6AI score0.02623EPSS
Exploits1References10Affected Software3
OSV
OSV
added 2021/01/06 11:15 p.m.1 views

UBUNTU-CVE-2020-36186

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

8.1CVSS5.8AI score0.02623EPSS
Exploits1References4
OSV
OSV
added 2021/01/06 11:15 p.m.0 views

UBUNTU-CVE-2020-36184

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

8.8CVSS6.9AI score0.07471EPSS
Exploits1References4
Prion
Prion
added 2021/01/06 11:15 p.m.24 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

6.8CVSS8.6AI score0.02623EPSS
Exploits1References10Affected Software43
Debian CVE
Debian CVE
added 2021/01/06 10:30 p.m.32 views

CVE-2020-36184

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource...

8.8CVSS8.1AI score0.07471EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2021/01/01 12:0 a.m.6 views

PT-2021-3159 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.8 Description: The issue is related to the interaction between serialization gadgets and typing, specifically with the org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource...

9.8CVSS6.6AI score0.62015EPSS
Exploits27References216
OSV
OSV
added 2020/12/17 7:15 p.m.1 views

DEBIAN-CVE-2020-35490

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS6.9AI score0.04249EPSS
Exploits1References1
OSV
OSV
added 2020/12/17 7:15 p.m.1 views

UBUNTU-CVE-2020-35490

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource...

8.1CVSS7AI score0.04249EPSS
Exploits1References5
Rows per page
Query Builder