CVE-2022-38752

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash...

CVE-2022-38752 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0...

CVE-2022-38752 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

CVE-2022-38752

CVE-2022-38752 affects SnakeYAML parsing of untrusted YAML content, where the parser can be exploited to crash via a stack overflow (DoS). The initial description notes a DOS risk when feeding crafted input to the SnakeYAML parser. The connected IBM bulletin details multiple SnakeYAML-related CVE...

CVE-2022-38752 DoS in SnakeYAML

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow...

CVE-2021-38752

creationtimestamp| type| source ---|---|--- 2021-08-16 18:14:57+00:00| seen| https://t.me/cibsecurity/27383...

CVE-2021-38752

CVE-2021-38752 is an XSS vulnerability in the Online Catering Reservation System (PHP, Sourcecodester). The issue occurs in the search bar where user input is not properly sanitized, allowing an attacker to arbitrarily inject code in the search functionality. CVSS metrics: AV:N/AC:L/PR:L/UI:R/S:C...