Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2020-10969 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
|
| CVE-2020-10968 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
|
| CVE-2020-10672 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka...
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
|
| CVE-2020-10673 |
|
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
|
| CVE-2019-18336 |
|
Vulnerability in siemens (CVE-2019-18336)
vulnerability in siemens (CVE-2019-18336). Risk of unauthorized operations or information disclosure.
|
| CVE-2020-3167 |
|
OS Command Injection in cisco (CVE-2020-3167)
OS command injection in cisco (CVE-2020-3167). Successful exploitation can lead to full system takeover.
|
| CVE-2019-19378 |
|
Out-of-Bounds Write in c (CVE-2019-19378)
out-of-bounds write in c (CVE-2019-19378). Successful exploitation can lead to full system takeover.
|
| CVE-2019-13721 |
|
Use-After-Free in google (CVE-2019-13721)
vulnerability in google (CVE-2019-13721). Successful exploitation can lead to full system takeover.
|
| CVE-2019-6852 |
|
Information Disclosure in schneider-electric (CVE-2019-6852)
vulnerability in schneider-electric (CVE-2019-6852). Confidential information can be exposed externally.
|
| CVE-2019-18197 |
|
Use-After-Free in nokogiri (CVE-2019-18197)
vulnerability in nokogiri (CVE-2019-18197). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.10.5` or later.
|
| CVE-2019-15256 |
|
Vulnerability in dos (CVE-2019-15256)
vulnerability in dos (CVE-2019-15256). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12698 |
|
Vulnerability in dos (CVE-2019-12698)
vulnerability in dos (CVE-2019-12698). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12699 |
|
Vulnerability in cisco (CVE-2019-12699)
vulnerability in cisco (CVE-2019-12699). Successful exploitation can lead to full system takeover.
|
| CVE-2019-12673 |
|
Buffer Overflow in dos (CVE-2019-12673)
vulnerability in dos (CVE-2019-12673). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12674 |
|
Vulnerability in cisco (CVE-2019-12674)
vulnerability in cisco (CVE-2019-12674). Successful exploitation can lead to full system takeover.
|
| CVE-2019-12675 |
|
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and...
Multiple vulnerabilities in the multi-instance feature of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to escape the container for their FTD instance and execute commands with root privileges in the host namespace. These vulnerabilities are due to insuff...
|
| CVE-2019-12676 |
|
Vulnerability in dos (CVE-2019-12676)
vulnerability in dos (CVE-2019-12676). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12678 |
|
Vulnerability in dos (CVE-2019-12678)
vulnerability in dos (CVE-2019-12678). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-12627 |
|
Vulnerability in cisco (CVE-2019-12627)
vulnerability in cisco (CVE-2019-12627). Confidential information can be exposed externally.
|
| CVE-2019-10086 |
|
Unsafe Deserialization in apache (CVE-2019-10086)
vulnerability in apache (CVE-2019-10086). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1068 KEV |
|
[KEV] Vulnerability in Microsoft sql-server (CVE-2019-1068)
vulnerability in Microsoft sql-server (CVE-2019-1068). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2019-6820 |
|
Vulnerability in schneider-electric (CVE-2019-6820)
vulnerability in schneider-electric (CVE-2019-6820). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1714 |
|
Vulnerability in cisco (CVE-2019-1714)
vulnerability in cisco (CVE-2019-1714). Data can be tampered with by attackers.
|
| CVE-2019-1703 |
|
Vulnerability in dos (CVE-2019-1703)
vulnerability in dos (CVE-2019-1703). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1704 |
|
Vulnerability in dos (CVE-2019-1704)
vulnerability in dos (CVE-2019-1704). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1708 |
|
Vulnerability in dos (CVE-2019-1708)
vulnerability in dos (CVE-2019-1708). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1694 |
|
Vulnerability in dos (CVE-2019-1694)
vulnerability in dos (CVE-2019-1694). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1696 |
|
Vulnerability in dos (CVE-2019-1696)
vulnerability in dos (CVE-2019-1696). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-15388 |
|
Vulnerability in dos (CVE-2018-15388)
vulnerability in dos (CVE-2018-15388). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-15462 |
|
Vulnerability in dos (CVE-2018-15462)
vulnerability in dos (CVE-2018-15462). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1687 |
|
Vulnerability in dos (CVE-2019-1687)
vulnerability in dos (CVE-2019-1687). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-10953 |
|
Vulnerability in abb (CVE-2019-10953)
vulnerability in abb (CVE-2019-10953). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-16561 |
|
Vulnerability in siemens (CVE-2018-16561)
vulnerability in siemens (CVE-2018-16561). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-6575 |
|
Vulnerability in dos (CVE-2019-6575)
vulnerability in dos (CVE-2019-6575). Risk of unauthorized operations or information disclosure.
|
| CVE-2019-1669 |
|
Vulnerability in dos (CVE-2019-1669)
vulnerability in dos (CVE-2019-1669). Data can be tampered with by attackers.
|
| CVE-2018-6439 |
|
Vulnerability in broadcom (CVE-2018-6439)
vulnerability in broadcom (CVE-2018-6439). Successful exploitation can lead to full system takeover.
|
| CVE-2018-15454 |
|
Vulnerability in dos (CVE-2018-15454)
vulnerability in dos (CVE-2018-15454). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-15756 |
|
Vulnerability in spring (CVE-2018-15756)
vulnerability in spring (CVE-2018-15756). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-15383 |
|
Vulnerability in dos (CVE-2018-15383)
vulnerability in dos (CVE-2018-15383). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-0453 |
|
Vulnerability in cisco (CVE-2018-0453)
vulnerability in cisco (CVE-2018-0453). Successful exploitation can lead to full system takeover.
|
| CVE-2018-10902 |
|
Vulnerability in c (CVE-2018-10902)
vulnerability in c (CVE-2018-10902). Successful exploitation can lead to full system takeover.
|
| CVE-2018-1258 |
|
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth...
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.
|
| CVE-2018-1259 |
|
XXE (XML External Entity) in broadcom (CVE-2018-1259)
vulnerability in broadcom (CVE-2018-1259). Confidential information can be exposed externally.
|
| CVE-2018-0227 |
|
Vulnerability in cisco (CVE-2018-0227)
vulnerability in cisco (CVE-2018-0227). Data can be tampered with by attackers.
|
| CVE-2018-0228 |
|
Vulnerability in dos (CVE-2018-0228)
vulnerability in dos (CVE-2018-0228). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-0230 |
|
Vulnerability in dos (CVE-2018-0230)
vulnerability in dos (CVE-2018-0230). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-0231 |
|
Vulnerability in dos (CVE-2018-0231)
vulnerability in dos (CVE-2018-0231). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-0240 |
|
Vulnerability in dos (CVE-2018-0240)
vulnerability in dos (CVE-2018-0240). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-1274 |
|
Vulnerability in dos (CVE-2018-1274)
vulnerability in dos (CVE-2018-1274). Risk of unauthorized operations or information disclosure.
|
| CVE-2018-9988 |
|
Out-of-Bounds Read in arm (CVE-2018-9988)
vulnerability in arm (CVE-2018-9988). Risk of unauthorized operations or information disclosure.
|