752 matches found
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
websocket-server-vuln-poc
websocket-server 0.6.4 — Input Validation Vulnerability PoC...
AZL-70583 CVE-2025-11230 affecting package haproxy for versions less than 2.9.11-4
Inefficient algorithm complexity in mjson in HAProxy allows remote attackers to cause a denial of service via specially crafted JSON requests...
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
haproxy: denial of service vulnerability in HAProxy mjson library
A flaw was found in haproxy. A stemming from an inefficient algorithmic complexity issue within its bundled mjson parsing library. This vulnerability is triggered when haproxy is configured to analyze JSON content, such as with the jsonquery or jwtpayloadquery function...
RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Moderate) (RHSA-2025:21706)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:21706 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers ca...
MGASA-2025-0284 Updated perl-Cpanel-JSON-XS packages fix security vulnerability
Cpanel::JSON::XS before version 4.40 for Perl has an integer buffer overflow causing a segfault when parsing crafted JSON, enabling denial-of-service attacks or other unspecified impact. CVE-2025-40929...
@privatus/strapi (>=2.0.0, <=2.0.1), @strapi/strapi (>=5.0.0, <=5.5.1) +1 more potentially affected by CVE-2024-56143 via @strapi/core (>=5.0.0, <=5.5.1)
@strapi/core NPM version =5.0.0, =2.0.0, =5.0.0, =3.0.0-beta.1, =3.0.0-beta.2 Source cves: CVE-2024-56143 Source advisory: OSV:GHSA-495J-H493-42Q2...
OESA-2025-2367 perl-JSON-XS security update
This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach the latter goal it was written in C. Security Fixes: JSON::XS before version 4.04 for Perl has an integer buffer overflow causing a segfault when...
EUVD-2019-0159
Malware in sbrugna...
EUVD-2019-5222
Malware in sbrugna...
EUVD-2018-11796
Malware in sbrugna...
EUVD-2020-12689
Malware in sbrugna...
EUVD-2018-0769
Malware in sbrugna...
EUVD-2020-17080
Malware in sbrugna...
RHEL 9 : perl-JSON-XS (RHSA-2025:17430)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:17430 advisory. This module converts Perl data structures to JSON and vice versa. Its primary goal is to be correct and its secondary goal is to be fast. To reach t...
ROS-20251006-15
A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...
ROS-20251006-12
A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...