https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:42:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2018-avi-347 certfr-2018-avi-347 https://cve.radiocsirt.org/vuln/certfr-2018-avi-347 https://cve.radiocsirt.org/vuln/cnvd-2017-32627 cnvd-2017-32627 https://cve.radiocsirt.org/vuln/cnvd-2017-32627 https://cve.radiocsirt.org/vuln/euvd-2026-175149 EUVD-2026-175149 https://cve.radiocsirt.org/vuln/euvd-2026-175149 https://cve.radiocsirt.org/vuln/fkie_cve-2017-15095 <p>A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.</p> <p>A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-15095 https://cve.radiocsirt.org/vuln/ghsa-h592-38cm-4ggp <p><strong>Affected:</strong> Maven: com.fasterxml.jackson.core:jackson-databind</p> <p>jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting additonal vulnerable classes.</p> <p><strong>Affected:</strong> Maven: com.fasterxml.jackson.core:jackson-databind</p> <p>jackson-databind in versions prior to 2.8.11 and 2.9.4 contain a deserialization flaw which allows an unauthenticated user to perform code execution by sending maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525, blacklisting additonal vulnerable classes.</p> https://cve.radiocsirt.org/vuln/ghsa-h592-38cm-4ggp https://cve.radiocsirt.org/vuln/gsd-2017-15095 gsd-2017-15095 https://cve.radiocsirt.org/vuln/gsd-2017-15095 https://cve.radiocsirt.org/vuln/rhsa-2017:3189 <p>jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)</p> <p>jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525)</p> https://cve.radiocsirt.org/vuln/rhsa-2017:3189 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15095 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java</p> <p>A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: jackson-databind, Ubuntu:Pro:14.04:LTS: libjackson-json-java, Ubuntu:16.04:LTS: libjackson-json-java, Ubuntu:Pro:16.04:LTS: jackson-databind, Ubuntu:18.04:LTS: libjackson-json-java, Ubuntu:20.04:LTS: libjackson-json-java</p> <p>A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-15095 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375