CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5362 matches found

Mend•added 2020/06/14 8:46 p.m.•7 views

CVE-2020-14060

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool aka apache/drill...

9.2CVSS0.08537EPSS

SaveExploits0References17

osv_cve•added 2020/06/14 8:15 p.m.•40 views

CVE-2020-14061

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and...

8.1CVSS6.5AI score

SaveExploits0References9

NVD•added 2020/06/14 8:15 p.m.•48 views

CVE-2020-14061

8.1CVSS0.04458EPSS

SaveExploits0References9

NVD•added 2020/06/14 8:15 p.m.•25 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS0.08108EPSS

SaveExploits0References9

osv_cve•added 2020/06/14 8:15 p.m.•42 views

CVE-2020-14062

8.1CVSS6.5AI score

SaveExploits0References9

Prion•added 2020/06/14 8:15 p.m.•33 views

Design/Logic Flaw

6.8CVSS8.6AI score0.08108EPSS

SaveExploits0References9Affected Software12

osv_ubuntu•added 2020/06/14 8:15 p.m.•26 views

UBUNTU-CVE-2020-14062

8.1CVSS6.8AI score0.08108EPSS

SaveExploits0References5

UbuntuCve•added 2020/06/14 8:15 p.m.•54 views

CVE-2020-14062

8.1CVSS6.8AI score0.08108EPSS

SaveExploits0References4

UbuntuCve•added 2020/06/14 8:15 p.m.•41 views

CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References4

Prion•added 2020/06/14 8:15 p.m.•39 views

Memory corruption

6.8CVSS8.6AI score0.04458EPSS

SaveExploits0References9Affected Software14

osv_ubuntu•added 2020/06/14 8:15 p.m.•45 views

UBUNTU-CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References5

CVE•added 2020/06/14 7:42 p.m.•495 views

CVE-2020-14061

CVE-2020-14061 concerns Jackson Databind 2.x before 2.9.10.5, where deserialization gadgets typing interaction (including oracle.jms.AQjms* components) can be exploited. IBM and NVD references show a high-severity exposure (base scores up to 8.1–9.8) with network attack vector and partial to high...

8.1CVSS8.5AI score0.04458EPSS

SaveExploits0References9Affected Software1

Mend•added 2020/06/14 7:42 p.m.•6 views

CVE-2020-14061

9.2CVSS0.04458EPSS

SaveExploits0References15

Debian CVE•added 2020/06/14 7:42 p.m.•60 views

CVE-2020-14061

8.1CVSS7.7AI score0.04458EPSS

SaveExploits0

Cvelist•added 2020/06/14 7:42 p.m.•42 views

CVE-2020-14061

8.7AI score0.04458EPSS

SaveExploits0References9

Vulnrichment•added 2020/06/14 7:42 p.m.•10 views

CVE-2020-14061

7.1AI score0.04458EPSS

SaveExploits0References9

Debian CVE•added 2020/06/14 7:42 p.m.•45 views

CVE-2020-14062

8.1CVSS7.8AI score0.08108EPSS

SaveExploits0

CVE•added 2020/06/14 7:42 p.m.•492 views

CVE-2020-14062

CVE-2020-14062 affects jackson-databind 2.x prior to 2.9.10.5, where interaction between serialization gadgets and typing (related to JNDIConnectionPool) can lead to deserialization abuse with high impact. IBM/X-Force entries consolidate this as a 9.8/3.0 vulnerability. In the connected IBM bulle...

8.1CVSS8.6AI score0.08108EPSS

SaveExploits0References9Affected Software1

Mend•added 2020/06/14 7:42 p.m.•6 views

CVE-2020-14062

9.2CVSS0.08108EPSS

SaveExploits0References16

Cvelist•added 2020/06/14 7:42 p.m.•44 views

CVE-2020-14062

8.7AI score0.08108EPSS

SaveExploits0References9

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by