CVE-2020-2760
- EPSS 0.1%
- Published 15.04.2020 14:15:25
- Last modified 21.11.2024 05:26:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via mu...
CVE-2020-2761
- EPSS 0.53%
- Published 15.04.2020 14:15:25
- Last modified 21.11.2024 05:26:11
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via m...
CVE-2020-2762
- EPSS 0.08%
- Published 15.04.2020 14:15:25
- Last modified 21.11.2024 05:26:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to c...
CVE-2020-2763
- EPSS 0.47%
- Published 15.04.2020 14:15:25
- Last modified 21.11.2024 05:26:12
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged atta...
CVE-2020-11619
- EPSS 1.73%
- Published 07.04.2020 23:15:12
- Last modified 21.11.2024 04:58:15
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
CVE-2020-11620
- EPSS 2.8%
- Published 07.04.2020 23:15:12
- Last modified 21.11.2024 04:58:15
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
CVE-2020-10029
- EPSS 0.05%
- Published 04.03.2020 15:15:13
- Last modified 21.11.2024 04:54:40
The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl...
CVE-2020-9547
- EPSS 53.63%
- Published 02.03.2020 04:15:11
- Last modified 21.11.2024 05:40:50
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
CVE-2020-9548
- EPSS 70.37%
- Published 02.03.2020 04:15:11
- Last modified 21.11.2024 05:40:50
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
CVE-2020-9546
- EPSS 2.33%
- Published 02.03.2020 04:15:10
- Last modified 21.11.2024 05:40:50
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).