CVE-2020-35728
- EPSS 39.67%
- Published 27.12.2020 05:15:11
- Last modified 27.08.2025 21:15:36
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.js...
CVE-2020-14551
- EPSS 0.2%
- Published 15.07.2020 18:15:18
- Last modified 21.11.2024 05:03:31
Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...
CVE-2020-2592
- EPSS 1.18%
- Published 15.01.2020 17:15:19
- Last modified 21.11.2024 05:25:39
Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Or...
CVE-2019-10246
- EPSS 1.7%
- Published 22.04.2019 20:29:00
- Last modified 21.11.2024 04:18:44
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory co...
CVE-2019-10247
- EPSS 6.59%
- Published 22.04.2019 20:29:00
- Last modified 21.11.2024 04:18:44
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 4...