Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.2Plex Media Server Remote Code Execution VulnerabilityKEVEPSS 72.9%May 8, 2020
- Critical9.8Liferay Portal Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.9%Mar 20, 2020
- Critical9.8Zoho ManageEngine Desktop Central File Upload VulnerabilityKEVEPSS 99.9%Mar 6, 2020
- High8.8Microsoft SQL Server Reporting Services Remote Code Execution VulnerabilityKEVEPSS 99.0%Feb 11, 2020
- Critical9.8Oracle Multiple Products Remote Code Execution VulnerabilityKEVEPSS 97.1%Jan 15, 2020
- Critical9.8Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.7%Dec 11, 2019
- High8.8Cisco RV Series Routers Deserialization of Untrusted Data VulnerabilityKEVEPSS 5.5%Nov 25, 2019
- Critical9.8SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityKEVEPSS 7.1%Aug 14, 2019
- High8.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityKEVEPSS 13.8%May 31, 2019
- Critical9.8Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityKEVEPSS 83.7%May 31, 2019
- Critical9.8Kentico Xperience Deserialization of Untrusted Data VulnerabilityKEVEPSS 95.1%Mar 26, 2019
- High7.5An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6.EPSS 8.9%Mar 21, 2019
- High8.1Drupal Core Remote Code Execution VulnerabilityKEVEPSS 92.0%Feb 21, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphi…EPSS 10.6%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.EPSS 10.6%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorp…EPSS 10.6%Jan 2, 2019
- Critical9.8FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes f…EPSS 7.5%Jan 2, 2019
- Critical9.8Jenkins Stapler Web Framework Deserialization of Untrusted Data VulnerabilityKEVEPSS 98.3%Dec 10, 2018
- High8.1Laravel Deserialization of Untrusted Data VulnerabilityKEVEPSS 76.6%Aug 9, 2018
- Critical9.8Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEVEPSS 62.0%May 19, 2018
- High8.8Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityKEVEPSS 73.2%May 9, 2018
- Critical9.8Oracle WebLogic Server Unspecified VulnerabilityKEVEPSS 100.0%Apr 18, 2018
- Critical9.8Cisco Secure Access Control System Java Deserialization VulnerabilityKEVEPSS 18.2%Mar 8, 2018
- Critical9.8FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for t…EPSS 19.8%Feb 26, 2018
- Critical9.8Jenkins Remote Code Execution VulnerabilityKEVEPSS 99.7%Jan 29, 2018