Lucene search
+L

5458 matches found

Prion
Prion
•added 2020/03/02 4:15 a.m.•39 views

Design/Logic Flaw

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

6.8CVSS9.2AI score0.04575EPSS
SaveExploits0References17Affected Software31
attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•9 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS7.4AI score0.18921EPSS
SaveExploits0References27
attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•8 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.4AI score0.18383EPSS
SaveExploits0References42
osv_ubuntu
osv_ubuntu
•added 2020/03/02 4:15 a.m.•33 views

UBUNTU-CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.2AI score0.18383EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2020/03/02 4:15 a.m.•13 views

UBUNTU-CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS5.8AI score0.04575EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•60 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS7.1AI score0.04575EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•70 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS7.1AI score0.18383EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2020/03/02 4:15 a.m.•58 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.8CVSS7.1AI score0.18921EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/03/02 4:15 a.m.•9 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS7.4AI score0.04575EPSS
SaveExploits0References29
Cvelist
Cvelist
•added 2020/03/02 3:59 a.m.•64 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.3AI score0.04575EPSS
SaveExploits0References17
CVE
CVE
•added 2020/03/02 3:59 a.m.•606 views

CVE-2020-9546

CVE-2020-9546 affects FasterXML jackson-databind 2.x before 2.9.10.4, where serialization gadgets and typing interactions involving org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig can lead to deserialization issues. The IBM/Cloudera bulletin references the same CVE and lists a high impact...

9.8CVSS9.2AI score0.04575EPSS
SaveExploits0References17Affected Software1
Mend
Mend
•added 2020/03/02 3:59 a.m.•33 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS0.04575EPSS
SaveExploits0References31
Debian CVE
Debian CVE
•added 2020/03/02 3:59 a.m.•57 views

CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

9.8CVSS8.9AI score0.04575EPSS
SaveExploits0
CVE
CVE
•added 2020/03/02 3:59 a.m.•625 views

CVE-2020-9547

CVE-2020-9547 involves jackson-databind 2.x before 2.9.10.4 where deserialization gadget typing interaction (related to ibatis-sqlmap) enables likely remote code execution. Connected IBM advisories enumerate multiple CBEs in jackson-databind and show affected IBM products; remediation guidance ge...

9.8CVSS9.1AI score0.18383EPSS
SaveIn wildExploits0References23Affected Software1
Mend
Mend
•added 2020/03/02 3:59 a.m.•4 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS0.18383EPSS
SaveExploits0References44
Vulnrichment
Vulnrichment
•added 2020/03/02 3:59 a.m.•6 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

0.18383EPSS
SaveExploits0References23
Debian CVE
Debian CVE
•added 2020/03/02 3:59 a.m.•60 views

CVE-2020-9547

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS8.9AI score0.18383EPSS
SaveExploits0
EUVD
EUVD
•added 2020/03/02 3:59 a.m.•11 views

EUVD-2020-0438

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig aka ibatis-sqlmap...

9.8CVSS8.6AI score0.18383EPSS
SaveExploits0References65
Cvelist
Cvelist
•added 2020/03/02 3:58 a.m.•50 views

CVE-2020-9548

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig aka anteros-core...

9.3AI score0.18921EPSS
SaveExploits0References16
CVE
CVE
•added 2020/03/02 3:58 a.m.•572 views

CVE-2020-9548

CVE-2020-9548 affects Cloudera Data Platform Private Cloud Base (IBM) 7.1.9. It is a deserialization vulnerability in FasterXML jackson-databind 2.x up to 2.9.10.3/4 where interaction between serialization gadgets and typing (relating to br.com.anteros.dbcp.AnterosDBCPConfig) can lead to remote c...

9.8CVSS9.1AI score0.18921EPSS
SaveIn wildExploits0References16Affected Software1
Rows per page
Query Builder