113 matches found
CVE-2024-52046
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows attackers to exploit the deserialization process by sending specially crafted malicious...
CVE-2024-52046 Apache MINA: MINA applications using unbounded deserialization may allow RCE
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows attackers to exploit the deserialization process by sending specially crafted malicious...
CVE-2024-52046: Deserialization of Untrusted Data
The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows attackers to exploit the deserialization process by sending specially crafted malicious...
MinIO 安全漏洞
MinIO is a high-performance object storage service released under the GNU Affero General Public License v3.0. A security vulnerability exists in version MinIO RELEASE.2022-10-02T19-29-29Z, which stems from the disclosure of information about the presence of If-Modified-Since, If-Unmodified-Since...
CVE-2023-40517
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
CVE-2023-40517
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
CVE-2023-40517 LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
CVE-2023-40517: Improper Limitation of a Pathname to a Restricted Directory
LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
PT-2023-27495 · Lg · Lg Supersign Media Editor
Name of the Vulnerable Software and Affected Versions: LG SuperSign Media Editor affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on affected installations of LG SuperSign Media Editor. Authentication is not required to exploit this...
Cross-site Scripting (XSS)
github.com/treeverse/lakefs is vulnerable to Cross-site Scripting XSS. The vulnerability exists in the controller.go and getobject.go, which allows an attacker to inject and execute malicious JavaScript when opening a direct link to an HTML file via lakeFS...
Null pointer dereference
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject...
CVE-2020-23879
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject...
CVE-2020-23879
CVE-2020-23879 affects pdf2json v0.71, with a NULL pointer dereference in ObjectStream::getObject. The vulnerability is documented across multiple feeds (NVD entry and Red Hat/CNVD/etc.), but the connected documents do not specify a vendor patch or remediation version. Impact details from NVD ind...
PT-2021-10960
Name of the Vulnerable Software and Affected Versions: pdf2json version 0.71 Description: The issue is related to a NULL pointer dereference in the ObjectStream::getObject component. This indicates a problem where the software attempts to access memory through a null, or non-existent, pointer,...
CVE-2020-23879: NULL Pointer Dereference
pdf2json v0.71 was discovered to contain a NULL pointer dereference in the component ObjectStream::getObject...
GHSA-957J-59C2-J692 Prototype pollution in getobject
Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...
Prototype pollution in getobject
Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...
CVE-2020-19465
An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...