UBUNTU-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

CVE-2015-2335

A JSON library in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors...

Design/Logic Flaw

A JSON library in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors...

CVE-2015-2335

A JSON library in MyBB aka MyBulletinBoard before 1.8.4 allows remote attackers to obtain the installation path via unknown vectors...

CVE-2015-2335

MyBB before 1.8.4 contains a JSON library information-disclosure vulnerability (CVE-2015-2335). The issue allows remote attackers to obtain the installation path via unknown vectors, impacting MyBB’s JSON handling. Affected product: MyBB (MyBulletinBoard) versions prior to 1.8.4; root cause is in...

UBUNTU-CVE-2013-6371

The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service CPU consumption via crafted JSON data, involving collisions...

Fedora 20 : drupal6-context-3.3-1.fc20 (2013-21303)

CVE-2013-4445/CVE-2013-4446 Context, a drupal module, which allows you to manage contextual conditions and reactions for different portions of your site, was found to have two severe security issues. First issue is that the module allows execution of PHP code via manipulation of a URL argument in...

SA-CONTRIB-2013-079 - Context - Multiple Vulnerabilities

Context allows you to manage contextual conditions and reactions for different portions of your site This advisory covers two separate issues. Arbitrary PHP Code Execution The first, and more severe issue Highly Critical status, is that the module allows execution of PHP code via manipulation of ...

DEBIAN-CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...