Max CVSS | 7.5 | Min CVSS | 5.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2018-14719 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
|
13-09-2023 - 14:22 | 02-01-2019 - 18:29 | |
CVE-2018-14718 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
|
13-09-2023 - 14:22 | 02-01-2019 - 18:29 | |
CVE-2018-12022 | 5.1 |
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in
|
13-09-2023 - 14:22 | 21-03-2019 - 16:00 | |
CVE-2017-17485 | 7.5 |
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to t
|
08-06-2023 - 18:00 | 10-01-2018 - 18:29 | |
CVE-2018-12023 | 5.1 |
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Oracle JDBC jar in the classpath, and an attacker can provid
|
20-10-2020 - 22:15 | 21-03-2019 - 16:00 | |
CVE-2018-19361 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
|
31-08-2020 - 14:15 | 02-01-2019 - 18:29 | |
CVE-2018-19360 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
|
31-08-2020 - 14:15 | 02-01-2019 - 18:29 | |
CVE-2018-19362 | 7.5 |
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
|
31-08-2020 - 14:15 | 02-01-2019 - 18:29 |