CVE & Exploit Intelligence Database

Updated 2h ago

Search and track vulnerabilities with real-time exploit intelligence. Cross-reference CVEs against public exploits from ExploitDB, Metasploit, GitHub, and Nuclei — with CVSS and EPSS scoring, CISA KEV monitoring, and AI-powered exploit analysis.

337,123 CVEs tracked 53,219 with exploits 4,686 exploited in wild 1,539 CISA KEV 3,912 Nuclei templates 37,757 vendors 42,422 researchers

69 results Clear all

CVE-2018-7489 9.8 CRITICAL 2 PoCs Analysis EPSS 0.36

Fasterxml Jackson-databind < 2.7.9.3 - Remote Code Execution

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.

CWE-184 Feb 26, 2018

CVE-2017-7525 9.8 CRITICAL 7 PoCs Analysis EPSS 0.79

jackson-databind <2.6.7.1, <2.7.9.1, <2.8.9 - Code Injection

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

CWE-184 Feb 06, 2018

CVE-2017-15095 9.8 CRITICAL 1 PoC Analysis EPSS 0.09

jackson-databind <2.8.10, 2.9.1 - Code Injection

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.

CWE-184 Feb 06, 2018

CVE-2018-6383 8.8 HIGH 1 PoC Analysis EPSS 0.13

Monstra CMS <3.0.4 - RCE

Monstra CMS through 3.0.4 has an incomplete "forbidden types" list that excludes .php (and similar) file extensions but not the .pht or .phar extension, which allows remote authenticated Admins or Editors to execute arbitrary PHP code by uploading a file, a different vulnerability than CVE-2017-18048.

CWE-184 Jan 29, 2018

CVE-2018-5968 8.1 HIGH 1 PoC Analysis EPSS 0.02

FasterXML jackson-databind <2.8.11, 2.9.x<2.9.3 - RCE

FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.

CWE-184 Jan 22, 2018

CVE-2017-0909 9.8 CRITICAL EPSS 0.00

Private_address_check <0.4.1 - SSRF

The private_address_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network addresses used to prevent server-side request forgery.

CWE-184 Nov 16, 2017

CVE-2015-5946 7.8 HIGH EPSS 0.00

SuiteCRM 7.2.2 - Code Injection

Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.

CWE-184 Aug 07, 2017

CVE-2017-7540 9.8 CRITICAL EPSS 0.00

rubygem-safemode <1.3.2 - Privilege Escalation

rubygem-safemode, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.

CWE-184 Jul 21, 2017

CVE-2016-6189 4.3 MEDIUM EPSS 0.00

SOGo <3.1.1 - Info Disclosure

Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive information by reading the fields in the (1) ics or (2) XML calendar feeds.

CWE-184 Feb 17, 2017