Lucene search
+L

6550 matches found

CVE
CVE
added 2021/01/05 6:47 p.m.31 views

CVE-2020-5062

CVE-2020-5062 entry is rejected/not used and does not represent an active vulnerability.

6.7AI score
SaveExploits0
CVE
CVE
added 2021/01/05 6:44 p.m.35 views

CVE-2020-5058

This CVE-2020-5058 entry is rejected/not used and does not represent an active vulnerability.

6.7AI score
SaveExploits0
CVE
CVE
added 2021/01/05 6:41 p.m.31 views

CVE-2020-5053

CVE-2020-5053 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
CVE
CVE
added 2021/01/05 6:39 p.m.27 views

CVE-2020-5050

CVE-2020-5050 is rejected/not used; this entry does not represent an active vulnerability.

6.7AI score
SaveExploits0
CVE
CVE
added 2021/01/05 6:39 p.m.33 views

CVE-2020-5049

This CVE entry is rejected and not used; it does not represent an active vulnerability.

6.7AI score
SaveExploits0
CVE
CVE
added 2021/01/05 6:33 p.m.27 views

CVE-2020-5041

CVE-2020-5041 is rejected/not used per the initial description and does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
Prion
Prion
added 2021/01/04 4:15 p.m.9 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
SaveExploits0
Prion
Prion
added 2021/01/04 4:15 p.m.5 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

7AI score
SaveExploits0
CVE
CVE
added 2021/01/04 3:32 p.m.28 views

CVE-2020-17536

CVE-2020-17536 is rejected/not used and does not represent an active vulnerability entry.

6.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/01/01 12:00 a.m.17 views

PT-2021-3168

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 Description The issue is related to the interaction between serialization gadgets and typing, specifically involving the org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource...

9.3CVSS6.8AI score0.10911EPSS
SaveExploits4References42
Positive Technologies
Positive Technologies
added 2021/01/01 12:00 a.m.19 views

PT-2021-3167

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.0 through 2.9.10.7 Description The issue is related to the interaction between serialization gadgets and typing, specifically involving the org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource...

9.3CVSS6.8AI score0.05218EPSS
SaveExploits1References35
Positive Technologies
Positive Technologies
added 2021/01/01 12:00 a.m.16 views

PT-2021-3163 · Fasterxml +3 · Jackson-Databind +3

Name of the Vulnerable Software and Affected Versions: FasterXML jackson-databind versions 2.x before 2.9.10.8 Description: The issue is related to the interaction between serialization gadgets and typing in the FasterXML jackson-databind library, specifically with the...

9.8CVSS6.6AI score0.26587EPSS
SaveExploits27References216
OSV
OSV
added 2020/12/27 5:15 a.m.5 views

DEBIAN-CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

8.1CVSS8.1AI score0.12504EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/27 5:15 a.m.7 views

UBUNTU-CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

8.1CVSS7.2AI score0.12504EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2020/12/27 4:32 a.m.5 views

CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

7.1AI score0.12504EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2020/12/27 12:00 a.m.11 views

FasterXML jackson-databind Code Issue Vulnerability

FasterXML jackson-databind is a JAVA based library that can convert data formats such as XML and JSON to JAVA objects. jackson-databind can easily convert Java objects to json objects and xml documents, and likewise convert json, xml to Java objects. A code issue vulnerability exists in FasterXML...

8.1CVSS7.2AI score0.12504EPSS
SaveExploits0References25
Positive Technologies
Positive Technologies
added 2020/12/27 12:00 a.m.16 views

PT-2020-5529

Name of the Vulnerable Software and Affected Versions FasterXML jackson-databind versions 2.x before 2.9.10.8 Description The issue is related to the mishandling of the interaction between serialization gadgets and typing in the Jackson-databind library, specifically with...

9.3CVSS6.8AI score0.12504EPSS
SaveExploits0References63
Kitploit
Kitploit
added 2020/12/22 11:30 a.m.50 views

0D1N v3.4 - Tool For Automating Customized Attacks Against Web Applications (Full Made In C Language With Pthreads, Have A Fast Performance)

0d1n is a tool for automating customized attacks against web applications. This tool is very faster because uses thread pool and C language. 0d1n is a tool for automating customized attacks against web applications. Video demo: Tool functions: Brute force login and passwords in auth forms Directo...

8.2AI score
SaveExploits0References3
OSV
OSV
added 2020/12/17 7:15 p.m.4 views

DEBIAN-CVE-2020-35491

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS7.5AI score0.09477EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/17 7:15 p.m.8 views

UBUNTU-CVE-2020-35491

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource...

8.1CVSS7AI score0.09477EPSS
SaveExploits1References5
Rows per page
Query Builder