CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4620 matches found

CVE•added 2020/06/14 8:46 p.m.•449 views

CVE-2020-14060

CVE-2020-14060 affects FasterXML jackson-databind 2.x before 2.9.10.5. The root cause is mishandling of the interaction between serialization gadgets and typing (related to JNDIConnectionPool), enabling deserialization-enabled impact on confidentiality, integrity, and availability. The IBM X-Forc...

8.1CVSS8.6AI score0.08607EPSS

SaveExploits0References9Affected Software1

NVD•added 2020/06/14 8:15 p.m.•23 views

CVE-2020-14062

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool aka xalan2...

8.1CVSS0.08072EPSS

SaveExploits0References9

NVD•added 2020/06/14 8:15 p.m.•37 views

CVE-2020-14061

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnectionFactory, and...

8.1CVSS0.04458EPSS

SaveExploits0References9

OSV•added 2020/06/14 8:15 p.m.•34 views

CVE-2020-14061

8.1CVSS6.5AI score

SaveExploits0References9

OSV•added 2020/06/14 8:15 p.m.•28 views

CVE-2020-14062

8.1CVSS6.5AI score

SaveExploits0References9

Prion•added 2020/06/14 8:15 p.m.•30 views

Design/Logic Flaw

6.8CVSS8.6AI score0.08072EPSS

SaveExploits0References9Affected Software12

UbuntuCve•added 2020/06/14 8:15 p.m.•33 views

CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References4

UbuntuCve•added 2020/06/14 8:15 p.m.•42 views

CVE-2020-14062

8.1CVSS6.8AI score0.08072EPSS

SaveExploits0References4

Prion•added 2020/06/14 8:15 p.m.•33 views

Memory corruption

6.8CVSS8.6AI score0.04458EPSS

SaveExploits0References9Affected Software14

OSV•added 2020/06/14 8:15 p.m.•15 views

UBUNTU-CVE-2020-14062

8.1CVSS6.8AI score0.08072EPSS

SaveExploits0References5

OSV•added 2020/06/14 8:15 p.m.•28 views

UBUNTU-CVE-2020-14061

8.1CVSS6.8AI score0.04458EPSS

SaveExploits0References5

Vulnrichment•added 2020/06/14 7:42 p.m.•3 views

CVE-2020-14061

7.1AI score0.04458EPSS

SaveExploits0References9

Cvelist•added 2020/06/14 7:42 p.m.•37 views

CVE-2020-14061

8.7AI score0.04458EPSS

SaveExploits0References9

CVE•added 2020/06/14 7:42 p.m.•480 views

CVE-2020-14061

CVE-2020-14061 concerns Jackson Databind 2.x before 2.9.10.5, where deserialization gadgets typing interaction (including oracle.jms.AQjms* components) can be exploited. IBM and NVD references show a high-severity exposure (base scores up to 8.1–9.8) with network attack vector and partial to high...

8.1CVSS8.5AI score0.04458EPSS

SaveExploits0References9Affected Software1

Debian CVE•added 2020/06/14 7:42 p.m.•54 views

CVE-2020-14061

8.1CVSS7.7AI score0.04458EPSS

SaveExploits0

Cvelist•added 2020/06/14 7:42 p.m.•39 views

CVE-2020-14062

8.7AI score0.08072EPSS

SaveExploits0References9

CVE•added 2020/06/14 7:42 p.m.•467 views

CVE-2020-14062

CVE-2020-14062 affects jackson-databind 2.x prior to 2.9.10.5, where interaction between serialization gadgets and typing (related to JNDIConnectionPool) can lead to deserialization abuse with high impact. IBM/X-Force entries consolidate this as a 9.8/3.0 vulnerability. In the connected IBM bulle...

8.1CVSS8.6AI score0.08072EPSS

SaveExploits0References9Affected Software1

Debian CVE•added 2020/06/14 7:42 p.m.•40 views

CVE-2020-14062

8.1CVSS7.8AI score0.08072EPSS

SaveExploits0

Cvelist•added 2020/06/11 5:00 p.m.•66 views

CVE-2020-5411 Jackson Configuration Allows Code Execution with Unknown "Serialization Gadgets"

When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deserialization gadgets". Spring Batch configures Jackson with global default typing enabled which means...

8.3AI score0.0178EPSS

SaveExploits0References1

RedHat Linux•added 2020/06/11 9:11 a.m.•10 views

jackson-databind: Serialization gadgets in anteros-core

A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.1AI score0.18345EPSS

SaveExploits0References4

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by