CVE-2022-23459 Double free or Use after Free in Value class of Jsonxx

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may poin...

CVE-2022-23459

Jsonxx or Json++ is a JSON parser, writer and reader written in C++. In affected versions of jsonxx use of the Value class may lead to memory corruption via a double free or via a use after free. The value class has a default assignment operator which may be used with pointer types which may poin...

OSV-2022-733 Security exception in jaz.Zer.<clinit>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50374 Crash type: Security exception Crash state: jaz.Zer. java.base/java.lang.Class.forName0 java.base/java.lang.Class.forName...

Jsonxx 资源管理错误漏洞

Jsonxx is a lightweight Json parser, writer, and reader written in C++ by the individual developer Hong Jiang in China. A resource management error vulnerability exists in Jsonxx, which stems from the Value class that may cause memory corruption through double release or reuse after release...

PT-2022-16001

Name of the Vulnerable Software and Affected Versions jsonxx affected versions not specified Description The issue is related to the use of the Value class in jsonxx, which may lead to memory corruption via a double free or a use after free. This occurs because the Value class has a default...

tomcat:ELEvaluationFuzzer: Security exception in jaz.Zer.<clinit>

Project: https://github.com/apache/tomcat.git Detailed Report: https://oss-fuzz.com/testcase?key=4839550299537408 Project: tomcat Fuzzing Engine: libFuzzer Fuzz Target: ELEvaluationFuzzer Job Type: libfuzzerasantomcat Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

guice:InjectorFuzzer: Security exception in jaz.Zer.<clinit>

Project: https://github.com/google/guice.git Detailed Report: https://oss-fuzz.com/testcase?key=4757374019174400 Project: guice Fuzzing Engine: libFuzzer Fuzz Target: InjectorFuzzer Job Type: libfuzzerasanguice Platform Id: linux Crash Type: Security exception Crash Address: Crash State: jaz.Zer...

CVE-2022-36344

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

Design/Logic Flaw

An unquoted search path vulnerability exists in 'JustSystems JUST Online Update for J-License' bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed...

Zoo Management System SQL注入漏洞

Zoo Management System is a zoo management system by Carlo Montero, an individual developer. It provides an online and automated platform for zoo organizations to manage their daily records. A SQL injection vulnerability exists in Zoo Management System. An attacker could exploit this vulnerability...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, Inc. The product includes centralized Wyse endpoint management, asset tracking, and automated device discovery.A security vulnerability exists in Wyse Management Suite 3.6.1 and prior versions, whic...

CLSA-2022-1660064249 Fix CVE(s): CVE-2022-21434, CVE-2022-21426, CVE-2022-21443, CVE-2022-34169, CVE-2022-21540, CVE-2022-21541, CVE-2022-21476, CVE-2022-21496

Backport upstream releases 8u342 and 8u332 to 16.04 LTS Security fixes in 8u342: - JDK-8272243: Improve DER parsing - JDK-8272249: Better properties of loaded Properties - JDK-8277608: Address IP Addressing - JDK-8281859, CVE-2022-21540: Improve class compilation - JDK-8281866, CVE-2022-21541:...

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...

SUSE-SU-2022:2707-1 Security update for java-11-openjdk

This update for java-11-openjdk fixes the following issues: Update to upstream tag jdk-11.0.16+8 July 2022 CPU - CVE-2022-21540: Improve class compilation bsc1201694 - CVE-2022-21541: Enhance MethodHandle invocations bsc1201692 - CVE-2022-34169: Improve Xalan supports bsc1201684...

CVE-2022-2706

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...

CVE-2022-2707

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...

CVE-2022-2707

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/facultysched.php. The manipulation of the argument faculty with the input ' OR SELECT 2078 FROMSELECT...

CVE-2022-2706

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...

Sql injection

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/classsched.php. The manipulation of the argument class with the input '||SELECT 0x684d6b6c WHERE 5993=5993 AND SELECT 2096...

CVE-2022-2707

SourceCodester Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in /pages/faculty_sched.php via the faculty parameter. The root cause is unsafely concatenated user input leading to injection, with remote exploitation demonstrated by public disclosure (VDB-205831). Exploi...