libyang:lyd_parse_mem_json: Crash in ly_ctx_get_module_by_iter

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=6155614127521792 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzermsanlibyang Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000002710 Crash...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lydjson_metadata_finish

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5854424412061696 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

rubygem-json: Unsafe object creation vulnerability in JSON

A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...

rubygem-json: Unsafe object creation vulnerability in JSON

A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...

Denial of service in GJSON

GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON. Due to improper bounds checking, maliciously crafted JSON objects can cause an out-of-bounds panic. If parsing user input, this may be used as a denial of service vector...

CVE-2021-30468 Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior ...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lyjson_number

Detailed Report: https://oss-fuzz.com/testcase?key=4623282851676160 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x609000014abd Crash State: lyjsonnumber lyjsonvalue...

Unspecified Vulnerability in Cesanta Mongoose

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in Cesanta MongooseOS mJS 1.26, which stems from a maliciously formed JSON string that c...

rubygem-json: Unsafe object creation vulnerability in JSON

A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...

rubygem-json: Unsafe object creation vulnerability in JSON

A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...

@molgenis-ui/core-ui (>=0.2.2, <=0.5.3), @molgenis/core-ui (0.2.4) +12 more potentially affected by CVE-2021-20087 via jquery-deparam (>=0.1.0, <=0.5.3)

jquery-deparam NPM version =0.1.0, =0.2.2, =0.1.0, =0.0.1, =1.0.1, =1.2.1, =1.4.4, =1.0.0, =1.0.0, =1.2.1, =0.0.6, =0.3.8, =0.17.22 Source cves: CVE-2021-20087 Source advisory: OSV:GHSA-XG68-CHX2-253G...

OSV-2021-791 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34531 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

perfetto:trace_processor_fuzzer: Crash in Json::decodePrefixedString

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=4546621204463616 Project: perfetto Fuzzing Engine: libFuzzer Fuzz Target: traceprocessorfuzzer Job Type: libfuzzerasanperfetto Platform Id: linux Crash Type: UNKNOWN READ Crash...

libyang:lyd_parse_mem_json: Heap-use-after-free in dict_hash_multi

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=5768719201599488 Project: libyang Fuzzing Engine: libFuzzer Fuzz Target: lydparsememjson Job Type: libfuzzerasanlibyang Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

libyang:lyd_parse_mem_json: Heap-buffer-overflow in lyjson_number

Project: https://github.com/CESNET/libyang.git Detailed Report: https://oss-fuzz.com/testcase?key=4520822766174208 Project: libyang Fuzzing Engine: afl Fuzz Target: lydparsememjson Job Type: aflasanlibyang Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x603000006a4f...

Cesanta Mongoose 缓冲区错误漏洞

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in Cesanta MongooseOS mJS 1.26, which stems from a maliciously formed JSON string that c...

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

CVE-2020-36325

CVE-2020-36325 affects the Jansson JSON library (up to and including 2.13.1). The issue is a parsing error in json_loads that allows an out-of-bounds read-access. Several connected sources specify that an upgrade is needed: Debian Docker/DLA entries and Mariner notes indicate vulnerability exists...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.parser.DefaultJSONParser.parseObject

Project: https://github.com/alibaba/fastjson2.git Detailed Report: https://oss-fuzz.com/testcase?key=5873524246970368 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

@bifot/adapter-knex (12.0.2), @blitzjs/cli (>=0.25.0-canary.2, <=0.45.2) +74 more potentially affected by CVE-2021-21414 via @prisma/sdk (>=2.0.0-alpha.919, <=2.19.0)

@prisma/sdk NPM version =2.0.0-alpha.919, =0.25.0-canary.2, =0.35.0-canary.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =12.0.0, =10.0.0, =1.0.3, =7.3.8, =7.5.2 and more Source cves: CVE-2021-21414 Source advisory: OSV:GHSA-PXCC-HJ8W-FMM7...