CVE-2021-31811
- EPSS 0.41%
- Published 12.06.2021 10:15:07
- Last modified 21.11.2024 06:06:16
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
CVE-2021-27906
- EPSS 0.54%
- Published 19.03.2021 16:15:13
- Last modified 21.11.2024 05:58:45
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
CVE-2021-27807
- EPSS 0.54%
- Published 19.03.2021 16:15:13
- Last modified 21.11.2024 05:58:36
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
CVE-2020-36183
- EPSS 2.72%
- Published 07.01.2021 00:15:15
- Last modified 21.11.2024 05:28:55
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
CVE-2020-36182
- EPSS 2.51%
- Published 07.01.2021 00:15:14
- Last modified 21.11.2024 05:28:55
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
CVE-2020-36180
- EPSS 2.72%
- Published 07.01.2021 00:15:14
- Last modified 21.11.2024 05:28:54
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
CVE-2020-36179
- EPSS 61.3%
- Published 07.01.2021 00:15:14
- Last modified 21.11.2024 05:28:54
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
CVE-2020-36189
- EPSS 3.37%
- Published 06.01.2021 23:15:13
- Last modified 21.11.2024 05:28:58
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
CVE-2020-36188
- EPSS 8.16%
- Published 06.01.2021 23:15:13
- Last modified 21.11.2024 05:28:57
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
CVE-2020-36187
- EPSS 2.41%
- Published 06.01.2021 23:15:13
- Last modified 21.11.2024 05:28:57
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.