Lucene search
+L

71 matches found

Cvelist
Cvelist
•added 2026/08/24 11:54 a.m.•37 views

CVE-2026-66648 WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

9.8CVSS0.00483EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/24 11:54 a.m.•15 views

EUVD-2026-64808

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

9.8CVSS5.1AI score0.00483EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/24 11:54 a.m.•16 views

CVE-2026-66648 WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

9.8CVSS5.8AI score0.00483EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•22 views

PT-2026-80841

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

9.8CVSS5.1AI score0.00483EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•2 views

CVE-2026-66648: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in Jawn = 1.4.2 versions...

9.8CVSS5.7AI score0.00483EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/20 12:24 p.m.•18 views

WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Jawn versions = 1.4.2...

9.8CVSS5.3AI score0.00483EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•80 views

PT-2026-60699

Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.7.0 Description Jawn parse methods allow arbitrarily deep JSON array and object nesting without a depth limit. A remote attacker can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted,...

7.5CVSS6AI score0.00623EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2026/07/17 12:00 a.m.•25 views

PT-2026-60700

Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.7.0 Description The AsyncParser component can perform quadratic work when a single JSON token is delivered across many small chunks, as each absorb call rescans the incomplete token from the beginning. A remote attacke...

7.5CVSS5.9AI score0.00567EPSS
SaveExploits0References20
Tenable Nessus
Tenable Nessus
•added 2025/08/30 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2022-21653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are...

7.5CVSS7.1AI score0.00793EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 1:22 a.m.•12 views

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS6.6AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2024/06/15 12:00 a.m.•5 views

OPENSUSE-SU-2024:11718-1 jawn-ast-0.14.1-2.1 on GA media

These are all security issues fixed in the jawn-ast-0.14.1-2.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS7.6AI score0.00793EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2023/02/15 3:29 a.m.•13 views

SUSE CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

7.5CVSS6.9AI score0.00793EPSS
SaveExploits1References6
OPENSUSE Linux
OPENSUSE Linux
•added 2022/02/21 12:00 a.m.•29 views

Security update for jaw (moderate)

openSUSE Security Update: Security update for jaw Announcement ID: openSUSE-SU-2022:0045-1 Rating: moderate References: 1194358 Cross-References: CVE-2022-21653 CVSS scores: CVE-2022-21653 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Backports SLE-15-SP2 An...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/20 1:01 p.m.•4 views

OPENSUSE-SU-2022:0045-1 Security update for jaw

jawn was updated to fix: CVE-2022-21653: DoS caused by a hash collision in SimpleFacade and MutableFacade bsc1194358...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1References3
OSV
OSV
•added 2022/01/18 10:43 a.m.•4 views

OPENSUSE-SU-2022:0106-1 Security update for jawn

This update for jawn fixes the following issues: - CVE-2022-21653: Fixed DoS caused by a hash collision in SimpleFacade and MutableFacade bsc1194358...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2022/01/12 12:00 a.m.•19 views

openSUSE 15 Security Update : jawn (openSUSE-SU-2022:0011-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2022:0011-1 advisory. - Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override...

7.5CVSS7.2AI score0.00793EPSS
SaveExploits1References4
OSV
OSV
•added 2022/01/11 1:01 p.m.•8 views

OPENSUSE-SU-2022:0011-1 Security update for jawn

This update for jawn fixes the following issues: CVE-2022-21653: DoS caused by a hash collision in SimpleFacade and MutableFacade boo1194358...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References3
OPENSUSE Linux
OPENSUSE Linux
•added 2022/01/11 12:00 a.m.•42 views

Security update for jawn (moderate)

openSUSE Security Update: Security update for jawn Announcement ID: openSUSE-SU-2022:0011-1 Rating: moderate References: 1194358 Cross-References: CVE-2022-21653 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes one vulnerability is now available. Description: This update for...

7.5CVSS7.4AI score0.00793EPSS
SaveExploits1References1
OSV
OSV
•added 2022/01/06 11:48 p.m.•14 views

GHSA-VC89-HCCF-RQ55 Hash collision in typelevel jawn

Impact Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack. Most applications do not implement these traits directly, but inherit from a library: Affected implementations include: org.http...

5.9CVSS5.9AI score0.00793EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/01/06 11:48 p.m.•44 views

Hash collision in typelevel jawn

Impact Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack. Most applications do not implement these traits directly, but inherit from a library: Affected implementations include: org.http...

7.5CVSS7.5AI score0.00793EPSS
SaveExploits1References4Affected Software18
Rows per page
Query Builder