İçeriğe atla
Noroxi

FasterXML kayıtları

fasterxml üreticisine ait 86 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
9
Düzeltme kaydı olan
%100
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

86 kayıt
  • CVE-2017-17485
    54Planlayın

    FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix

    KritikCVSS 9,8Kavram kanıtıEPSS %50

    fasterxml · jackson-databind10 Oca 2018

  • CVE-2017-7525
    50Planlayın

    A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthentica

    KritikCVSS 9,8Kavram kanıtıEPSS %38

    fasterxml · jackson-databind6 Şub 2018

  • CVE-2020-8840
    47Planlayın

    FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyedi

    KritikCVSS 9,8Kavram kanıtıEPSS %27

    fasterxml · jackson-databind10 Şub 2020

  • CVE-2018-7489
    45Planlayın

    FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    fasterxml · jackson-databind26 Şub 2018

  • CVE-2020-9547
    45Planlayın

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sq

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    fasterxml · jackson-databind2 Mar 2020

  • CVE-2020-9548
    45Planlayın

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.antero

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    fasterxml · jackson-databind2 Mar 2020

  • CVE-2018-14718
    43Planlayın

    FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-

    KritikCVSS 9,8İstismar yokEPSS %13

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2018-14721
    43Planlayın

    FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging

    KritikCVSS 10,0İstismar yokEPSS %10

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2019-14540
    42Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    fasterxml · jackson-databind15 Eyl 2019

  • CVE-2018-19361
    42Planlayın

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa clas

    KritikCVSS 9,8İstismar yokEPSS %11

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2018-19360
    42Planlayın

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transp

    KritikCVSS 9,8İstismar yokEPSS %11

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2018-19362
    42Planlayın

    FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common

    KritikCVSS 9,8İstismar yokEPSS %11

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2018-14719
    42Planlayın

    FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-

    KritikCVSS 9,8İstismar yokEPSS %10

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2019-20330
    42Planlayın

    FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

    KritikCVSS 9,8İstismar yokEPSS %9

    fasterxml · jackson-databind3 Oca 2020

  • CVE-2017-15095
    42Planlayın

    A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user

    KritikCVSS 9,8İstismar yokEPSS %8

    fasterxml · jackson-databind6 Şub 2018

  • CVE-2019-14379
    41Planlayın

    SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache

    KritikCVSS 9,8İstismar yokEPSS %8

    fasterxml · jackson-databind29 Tem 2019

  • CVE-2018-14720
    41Planlayın

    FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to bloc

    KritikCVSS 9,8İstismar yokEPSS %8

    fasterxml · jackson-databind2 Oca 2019

  • CVE-2018-11307
    41Planlayın

    An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5.

    KritikCVSS 9,8İstismar yokEPSS %6

    fasterxml · jackson-databind9 Tem 2019

  • CVE-2019-16942
    41Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.

    KritikCVSS 9,8İstismar yokEPSS %6

    fasterxml · jackson-databind1 Eki 2019

  • CVE-2019-14892
    41Planlayın

    A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization

    KritikCVSS 9,8İstismar yokEPSS %6

    fasterxml · jackson-databind2 Mar 2020

  • CVE-2019-17531
    41Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.

    KritikCVSS 9,8İstismar yokEPSS %5

    fasterxml · jackson-databind12 Eki 2019

  • CVE-2019-16335
    40Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

    KritikCVSS 9,8İstismar yokEPSS %5

    fasterxml · jackson-databind15 Eyl 2019

  • CVE-2019-16943
    40Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.

    KritikCVSS 9,8İstismar yokEPSS %5

    fasterxml · jackson-databind1 Eki 2019

  • CVE-2019-17267
    40Planlayın

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10.

    KritikCVSS 9,8İstismar yokEPSS %5

    fasterxml · jackson-databind6 Eki 2019

  • CVE-2020-9546
    40Planlayın

    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.ha

    KritikCVSS 9,8İstismar yokEPSS %5

    fasterxml · jackson-databind2 Mar 2020