Archive

10 February 2020

Vulnerabilities first published on this day (UTC), newest first.

← January 2020 2020 / February /10 March 2020 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2020-8840 Public exploit EPSS 27%

Deserialization of Untrusted Data in jackson-databind

FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.

com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven

Feb 10, 2020
Critical 9.4

CVE-2019-17137 Public exploit

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR AC12…

NETGEAR AC1200 Network devices

Feb 10, 2020