NVD disclosure day
CVE-2019-14893
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A flaw in `jackson-databind` allows arbitrary code execution when processing untrusted data through polymorphic deserialization. This vulnerability affects applications that handle external data input and could be exploited by remote, unauthenticated attackers. Readers should care because this issue impacts widely used
CVE-2019-14892
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the jackson-databind library allows for arbitrary code execution through polymorphic deserialization of malicious objects using commons-configuration JNDI classes. If reachable, an attacker could exploit this to compromise affected systems by sending specially crafted input, posing a signifi
CVE-2019-17026
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A type confusion flaw in the IonMonkey JIT compiler used in certain Mozilla products could allow attackers to compromise systems. Affected organizations face risks to their data and systems due to this vulnerability.
CVE-2020-9548
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability in the FasterXML jackson-databind library allows for remote code execution through mishandled serialization. This could lead to unauthorized access and control of affected systems by processing specially crafted data. Confirming its presence and reachability is crucial for assessing risk.
CVE-2020-9547
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical deserialization vulnerability in the Jackson-databind library allows for remote code execution when processing untrusted serialized data, potentially impacting systems that handle such data.
CVE-2020-9546
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
The FasterXML jackson-databind library has a vulnerability in how it handles serialization gadgets and typing, specifically related to HikariConfig. This could allow attackers to process data in unintended ways if they can reach a vulnerable application, potentially impacting system data and service behavior. The libra