Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jackson vulnerabilities and exploits
(subscribe to this query)
5.7
CVSSv3
CVE-2019-2956
Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access vi...
Oracle Database Server 12.2.0.1
Oracle Database Server 18c
Oracle Database Server 19c
Oracle Database Server 12.1.0.2
5.4
CVSSv3
CVE-2023-37983
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Noël Jackson Art Direction plugin <= 0.2.4 versions.
Keegnotrub Art Direction
5.4
CVSSv3
CVE-2023-23815
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Alan Jackson Multi-column Tag Map plugin <= 17.0.24 versions.
Multi-column Tag Map Project Multi-column Tag Map
5.3
CVSSv3
CVE-2022-38392
Certain 5400 RPM hard drives, for laptops and other PCs in approximately 2005 and later, allow physically proximate malicious users to cause a denial of service (device malfunction and system crash) via a resonant-frequency attack with the audio signal from the Rhythm Nation musi...
* 5400rmp Oem Harddrive -
1 Github repository
1 Article
4.7
CVSSv3
CVE-2023-35116
jackson-databind up to and including 2.15.2 allows malicious users to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps ...
Fasterxml Jackson-databind
NA
CVE-2019-14361
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-14439. Reason: This candidate is a reservation duplicate of CVE-2019-14439. Notes: All CVE users should reference CVE-2019-14439 instead of this candidate. All references and descriptions in this candidate ha...
NA
CVE-2010-0475
Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x prior to 3.0.9 and 3.1.x prior to 3.1.1 allows remote malicious users to inject arbitrary web script or HTML via the role parameter.
Palo Alto Networks Firewall
1 EDB exploit
NA
CVE-2010-0465
Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x prior to 5.2.0l and 5.5.x prior to 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field.
Sugarcrm Sugarcrm 5.2c
Sugarcrm Sugarcrm 5.2d
Sugarcrm Sugarcrm 5.2.0g
Sugarcrm Sugarcrm 5.2a
Sugarcrm Sugarcrm 5.5
Sugarcrm Sugarcrm 5.5.0
Sugarcrm Sugarcrm 5.2g
Sugarcrm Sugarcrm 5.2h
Sugarcrm Sugarcrm 5.2e
Sugarcrm Sugarcrm 5.2f
NA
CVE-2009-1392
The browser engine in Mozilla Firefox 3 prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)...
Mozilla Firefox 3.0.5
Mozilla Firefox 3.0.6
Mozilla Thunderbird 2.0.0.11
Mozilla Thunderbird 2.0.0.12
Mozilla Thunderbird 2.0.0.2
Mozilla Thunderbird 2.0.0.3
Mozilla Thunderbird 2.0 .12
Mozilla Thunderbird 0.1
Mozilla Thunderbird 0.2
Mozilla Thunderbird 0.7.2
Mozilla Thunderbird 0.7.3
Mozilla Thunderbird 0.9
Mozilla Thunderbird 1.0.5
Mozilla Thunderbird 1.5.0.13
Mozilla Thunderbird 1.5.0.10
Mozilla Thunderbird 1.5.1
Mozilla Thunderbird 1.5.0.3
Mozilla Thunderbird 1.7.3
Mozilla Seamonkey 1.0
Mozilla Seamonkey 1.1.11
Mozilla Seamonkey 1.1.12
Mozilla Seamonkey 1.1
NA
CVE-2009-1832
Mozilla Firefox prior to 3.0.11, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.17 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame constructi...
Mozilla Firefox 3.0.1
Mozilla Firefox 3.0.2
Mozilla Firefox 3.0
Mozilla Firefox 3.0.9
Mozilla Thunderbird 2.0.0.15
Mozilla Thunderbird 2.0.0.16
Mozilla Thunderbird 2.0.0.6
Mozilla Thunderbird 2.0.0.7
Mozilla Thunderbird 2.0 .5
Mozilla Thunderbird 2.0 .6
Mozilla Thunderbird 0.5
Mozilla Thunderbird 0.6
Mozilla Thunderbird 1.0.1
Mozilla Thunderbird 1.0.3
Mozilla Thunderbird 1.0.8
Mozilla Thunderbird 1.5.0.12
Mozilla Thunderbird 1.5.0.5
Mozilla Thunderbird 1.5.0.9
Mozilla Thunderbird 1.5.0.7
Mozilla Thunderbird 1.5.0.2
Mozilla Seamonkey 1.0.6
Mozilla Seamonkey 1.0.8
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »