Lucene search
+L

151 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/02/01 12:00 a.m.•3 views

CVE-2016-5898: Undefined Security Weakness

IBM Jazz Reporting Service JRS could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information...

4.3CVSS6AI score0.00941EPSS
SaveExploits0References2
CNVD
CNVD
•added 2016/09/06 12:00 a.m.•9 views

PHP JsonSerializable::jsonSerialize json_encode Local Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. PHP 7.0 A local denial of service vulnerability exists in JsonSerializable::jsonSerialize jsonencode. Allows an attacker to exploit the vulnerability to launch a denial of service attack...

6.2AI score
SaveExploits0References1
NVD
NVD
•added 2014/01/02 2:59 p.m.•31 views

CVE-2013-7224

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

5CVSS6AI score0.02525EPSS
SaveExploits1References6
Prion
Prion
•added 2014/01/02 2:59 p.m.•21 views

Cross site request forgery (csrf)

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

5CVSS6.3AI score0.02525EPSS
SaveExploits1References6Affected Software1
CVE
CVE
•added 2014/01/02 11:00 a.m.•71 views

CVE-2013-7224

Fat Free CRM before 0.12.1 is vulnerable due to unrestricted JSON serialization, allowing remote attackers to obtain sensitive information via a direct request (e.g., /users/1.json). This is supported by multiple sources in connected documents. The issue has a confirmed fix; upgrading to 0.12.1 (...

5CVSS6.1AI score0.02525EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
•added 2014/01/02 11:00 a.m.•41 views

CVE-2013-7224

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

6AI score0.02525EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/01/02 12:00 a.m.•2 views

CVE-2013-7224: Exposure of Sensitive Information to an Unauthorized Actor

Fat Free CRM before 0.12.1 does not restrict JSON serialization, which allows remote attackers to obtain sensitive information via a direct request, as demonstrated by a request for users/1.json...

5CVSS5.8AI score0.02525EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2013/07/01 12:00 a.m.•102 views

[USN-1887-1] OpenStack Swift vulnerabilities

========================================================================== Ubuntu Security Notice USN-1887-1 June 20, 2013 swift vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubun...

7.5CVSS0.8AI score0.06571EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2013/06/21 12:00 a.m.•49 views

Ubuntu 12.04 LTS / 12.10 / 13.04 : swift vulnerabilities (USN-1887-1)

Sebastian Krahmer discovered that Swift used the loads function in the pickle Python module when it was configured to use memcached. A remote attacker on the same network as memcached could exploit this to execute arbitrary code. This update adds a new memcacheserializationsupport option to suppo...

9.8CVSS8.5AI score0.06571EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2013/06/20 2:40 a.m.•66 views

USN-1887-1: OpenStack Swift vulnerabilities

Sebastian Krahmer discovered that Swift used the loads function in the pickle Python module when it was configured to use memcached. A remote attacker on the same network as memcached could exploit this to execute arbitrary code. This update adds a new memcacheserializationsupport option to suppo...

9.8CVSS8.4AI score0.06571EPSS
SaveExploits0
Fedora
Fedora
•added 2013/06/18 6:25 a.m.•16 views

[SECURITY] Fedora 19 Update: php-pecl-jsonc-1.3.1-1.fc19

The php-pecl-jsonc module will add support for JSON JavaScript Object Nota tion serialization to PHP. This is a dropin alternative to standard PHP JSON extension which use the json-c library parser...

2.7AI score
SaveExploits0
Rows per page
Query Builder