fasterxml Vulnerability Advisory Catalog

Total 79 security vulnerabilities recorded for fasterxml software and firmware.

← Back to All Vendors
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.o...

📅 2020-12-27
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp...

📅 2020-12-17
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp...

📅 2020-12-17
CVSS 8.1 Dossier →
Component: jackson-databind

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML externa...

📅 2020-12-03
CVSS 7.5 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcompone...

📅 2020-09-17
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.Ant...

📅 2020-08-25
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jnd...

📅 2020-06-16
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.l...

📅 2020-06-14
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xala...

📅 2020-06-14
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueCo...

📅 2020-06-14
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jell...

📅 2020-04-07
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop...

📅 2020-04-07
CVSS 8.1 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.W...

📅 2020-03-31
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.prox...

📅 2020-03-31
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (...

📅 2020-03-31
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane...

📅 2020-03-26
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.prov...

📅 2020-03-26
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types...

📅 2020-03-18
CVSS 8.8 Dossier →
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transa...

📅 2020-03-18
CVSS 8.8 Dossier →
CVE-2019-14893 CRITICAL
Component: jackson-databind

A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of mal...

📅 2020-03-02
CVSS 9.8 Dossier →
CVE-2019-14892 CRITICAL
Component: jackson-databind

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a mali...

📅 2020-03-02
CVSS 9.8 Dossier →
CVE-2020-9548 CRITICAL
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.Ant...

📅 2020-03-02
CVSS 9.8 Dossier →
CVE-2020-9547 CRITICAL
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engin...

📅 2020-03-02
CVSS 9.8 Dossier →
CVE-2020-9546 CRITICAL
Component: jackson-databind

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shade...

📅 2020-03-02
CVSS 9.8 Dossier →
Page 2 of 4 (79 Total Records)