Aggregator

CVE-2020-14060 | FasterXML jackson-databind up to 2.9.10.4 oadd.org.apache.xalan.lib.sql.JNDIConnectionPool Serialized deserialization (WID-SEC-2024-0794)

Vuldb Updates
1 month 2 weeks ago
A vulnerability identified as critical has been detected in FasterXML jackson-databind up to 2.9.10.4. Affected is an unknown function of the component oadd.org.apache.xalan.lib.sql.JNDIConnectionPool. The manipulation leads to deserialization (Serialized). This vulnerability is listed as CVE-2020-14060. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2020-14062 | FasterXML jackson-databind up to 2.9.10.4 Serialized deserialization (WID-SEC-2024-0794)

Vuldb Updates
1 month 2 weeks ago
A vulnerability marked as critical has been reported in FasterXML jackson-databind up to 2.9.10.4. Affected by this issue is some unknown functionality of the component com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool. This manipulation causes deserialization (Serialized). This vulnerability is registered as CVE-2020-14062. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle Retail Service Backbone 14.1/15.0/16.0 RSB kernel deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability was found in Oracle Retail Service Backbone 14.1/15.0/16.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component RSB kernel. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2020-9546. The attack may be performed from remote. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2020-35728 | FasterXML jackson-databind up to 2.9.10.7 Serialization Gadget deserialization

Vuldb Updates
1 month 2 weeks ago
A vulnerability identified as problematic has been detected in FasterXML jackson-databind. Affected is an unknown function of the component Serialization Gadget Handler. The manipulation leads to deserialization. This vulnerability is uniquely identified as CVE-2020-35728. The attack can only be initiated within the local network. No exploit exists. You should upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle Retail Merchandising System 15 Foundation deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as very critical has been found in Oracle Retail Merchandising System 15. The affected element is an unknown function of the component Foundation. Performing a manipulation results in deserialization. This vulnerability is known as CVE-2020-9546. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle Retail Sales Audit 14.1 Rule Wizards deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as very critical was found in Oracle Retail Sales Audit 14.1. The impacted element is an unknown function of the component Rule Wizards. Executing a manipulation can lead to deserialization. This vulnerability is handled as CVE-2020-9546. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is advised.
vuldb.com

山河无恙，膝下承欢

赵武的自留地
1 month 2 weeks ago
随着年龄的增长，很多最初想做的事情慢慢变得遥不可及。比如经营农场这种事，还比如买房车这种事，再有就是带娃露营这种事，理想很好，后来都没有了前提条件。

Microsoft Edge Stores All Saved Passwords in Cleartext Process Memory at Launch

Cyber Security News
1 month 2 weeks ago

A security researcher has discovered that Microsoft Edge decrypts every stored password into process memory the moment the browser launches and keeps them there as cleartext, regardless of whether the user ever visits those sites. The finding, disclosed on April 29 by PaloAltoNtwks Norway at BigBiteOfTech, was uncovered by researcher @L1v1ng0ffTh3L4N, who systematically tested every […]

The post Microsoft Edge Stores All Saved Passwords in Cleartext Process Memory at Launch appeared first on Cyber Security News.

Guru Baran

CVE-2020-9546 | Oracle Enterprise Manager Base Platform 13.3.0.0/13.4.0.0 Enterprise Manager Install deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as very critical has been found in Oracle Enterprise Manager Base Platform 13.3.0.0/13.4.0.0. Affected by this vulnerability is an unknown functionality of the component Enterprise Manager Install. The manipulation leads to deserialization. This vulnerability is listed as CVE-2020-9546. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle Banking Platform up to 2.9.0 Framework deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability classified as very critical was found in Oracle Banking Platform up to 2.9.0. This issue affects some unknown processing of the component Framework. Such manipulation leads to deserialization. This vulnerability is listed as CVE-2020-9546. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.
vuldb.com

CVE-2020-9546 | Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0 Centralized Thirdparty Jars deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability, which was classified as very critical, has been found in Oracle WebLogic Server 12.2.1.3.0/12.2.1.4.0. This vulnerability affects unknown code of the component Centralized Thirdparty Jars. Performing a manipulation results in deserialization. This vulnerability is identified as CVE-2020-9546. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.4 E1 IOT Orchestrator Security deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability marked as very critical has been reported in Oracle JD Edwards EnterpriseOne Orchestrator up to 9.2.4. The affected element is an unknown function of the component E1 IOT Orchestrator Security. The manipulation leads to deserialization. This vulnerability is documented as CVE-2020-9546. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.
vuldb.com

CVE-2020-9546 | Oracle JD Edwards EnterpriseOne Tools up to 9.2.4 EnterpriseOne Mobility Sec deserialization (Nessus ID 216682)

Vuldb Updates
1 month 2 weeks ago
A vulnerability described as very critical has been identified in Oracle JD Edwards EnterpriseOne Tools up to 9.2.4. The impacted element is an unknown function of the component EnterpriseOne Mobility Sec. The manipulation results in deserialization. This vulnerability is reported as CVE-2020-9546. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
vuldb.com

Managed ad