jackson-databind vulnerabilities (Mageia)

39 vulnerabilities.

• jackson-databind Mageia Uncontrolled Resource Consumption in FasterXML jackson-databind CVE-2022-42004 Fix available 7.5 HighOctober 2, 2022
• jackson-databind Mageia Uncontrolled Resource Consumption in Jackson-databind CVE-2022-42003 Fix available 7.5 HighOctober 2, 2022
• jackson-databind Mageia Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• jackson-databind Mageia Deserialization of untrusted data in jackson-databind CVE-2021-20190 Fix available 8.1 HighJanuary 19, 2021
• jackson-databind Mageia Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.4% 8.1 HighDecember 27, 2020
• jackson-databind Mageia XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• jackson-databind Mageia Deserialization of untrusted data in Jackson Databind CVE-2020-14195 Public exploitFix available 8.1 HighJune 16, 2020
• jackson-databind Mageia Deserialization of untrusted data in Jackson Databind CVE-2020-14060 Fix available 8.1 HighJune 14, 2020
• jackson-databind Mageia Deserialization of untrusted data in Jackson Databind CVE-2020-14061 Fix available 8.1 HighJune 14, 2020
• jackson-databind Mageia Deserialization of untrusted data in Jackson Databind CVE-2020-14062 Fix available 8.1 HighJune 14, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11620 Fix available 8.1 HighApril 7, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11619 Fix available 8.1 HighApril 7, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11111 Fix available 8.8 HighMarch 31, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11112 Fix available 8.8 HighMarch 31, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11113 Public exploitFix available 8.8 HighMarch 31, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10968 Fix available 8.8 HighMarch 26, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10969 Fix available 8.8 HighMarch 26, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672 Fix available 8.8 HighMarch 18, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10673 Public exploitFix available 8.8 HighMarch 18, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• jackson-databind Mageia jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• jackson-databind Mageia Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• jackson-databind Mageia Deserialization of Untrusted Data in jackson-databind CVE-2019-20330 Fix available 9.8 CriticalJanuary 3, 2020
• jackson-databind Mageia jackson-databind polymorphic typing issue CVE-2019-17531 Fix available 9.8 CriticalOctober 12, 2019
• jackson-databind Mageia Improper Input Validation in jackson-databind CVE-2019-17267 Fix available 9.8 CriticalOctober 6, 2019
• jackson-databind Mageia jackson-databind polymorphic typing issue CVE-2019-16943 Fix available 9.8 CriticalOctober 1, 2019
• jackson-databind Mageia Polymorphic Typing in FasterXML jackson-databind CVE-2019-16942 Fix available 9.8 CriticalOctober 1, 2019
• jackson-databind Mageia Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-16335 Fix available 9.8 CriticalSeptember 15, 2019
• jackson-databind Mageia Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-14540 Public exploitFix available EPSS 10.8% 9.8 CriticalSeptember 15, 2019
• jackson-databind Mageia Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-14439 Public exploitFix available EPSS 10.8% 7.5 HighJuly 30, 2019
• jackson-databind Mageia Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-14379 Fix available 9.8 CriticalJuly 29, 2019
• jackson-databind Mageia Deserialization of Untrusted Data in FasterXML jackson-databind CVE-2019-12384 Public exploitFix available EPSS 45.2% 5.9 MediumJune 21, 2019
• jackson-databind Mageia Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-12814 Public exploitFix available EPSS 10.9% 5.9 MediumJune 19, 2019
• jackson-databind Mageia Information exposure in FasterXML jackson-databind CVE-2019-12086 Public exploitFix available EPSS 21.9% 7.5 HighMay 17, 2019
• jackson-databind Mageia Deserialization of Untrusted Data in jackson-databind CVE-2018-5968 Fix available 8.1 HighJanuary 22, 2018
• jackson-databind Mageia jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass CVE-2017-17485 Public exploitFix available EPSS 49.7% 9.8 CriticalJanuary 10, 2018
• jackson-databind Mageia jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution CVE-2017-15095 Fix available 9.8 CriticalNovember 16, 2017
• jackson-databind Mageia jackson-databind is vulnerable to a deserialization flaw CVE-2017-7525 Public exploitFix available EPSS 37.7% 9.8 CriticalAugust 11, 2017