Lucene search
+L

731 matches found

osv_ghsa
osv_ghsa
•added 2021/05/18 6:34 p.m.•58 views

GHSA-9JCX-PR2F-QVQ5 miekg/dns parsing error leads to nil pointer dereference and DoS

An issue was discovered in setTA in scanrr.go in the Miek Gieben DNS library before 1.0.10 for Go. A dns.ParseZone parsing error causes a segmentation violation, leading to denial of service...

7.5CVSS7.2AI score0.0176EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2021/04/27 6:24 p.m.•37 views

CVE-2020-36325

A flaw was found in jansson. An out-of-bounds read-access bug is possible due to a parsing error in jsonloads. The highest threat from this vulnerability is do system availability...

7.5CVSS2.1AI score0.01718EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/04/27 12:00 a.m.•32 views

Jansson Out-of-Bounds Memory Read Vulnerability

Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...

7.5CVSS6.6AI score0.01718EPSS
SaveExploits1References1
NVD
NVD
•added 2021/04/26 6:15 p.m.•36 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS0.01718EPSS
SaveExploits1References1
osv_azl
osv_azl
•added 2021/04/26 6:15 p.m.•20 views

AZL-6490 CVE-2020-36325 affecting package jansson for versions less than 2.14-1

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.2AI score0.01718EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/04/26 6:15 p.m.•15 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.3AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2021/04/26 6:15 p.m.•6 views

DEBIAN-CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.8AI score0.01718EPSS
SaveExploits1References1
osv_alpine
osv_alpine
•added 2021/04/26 6:15 p.m.•13 views

ALPINE-CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7AI score0.01718EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2021/04/26 6:15 p.m.•44 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.1AI score0.01718EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/26 6:15 p.m.•28 views

Design/Logic Flaw

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

5CVSS7.3AI score0.01718EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/04/26 5:05 p.m.•8 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

8.7CVSS0.01718EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/04/26 5:05 p.m.•58 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.4AI score0.01718EPSS
SaveExploits1References1
AlpineLinux
AlpineLinux
•added 2021/04/26 5:05 p.m.•116 views

CVE-2020-36325

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS7.5AI score0.01718EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/04/26 12:00 a.m.•10 views

PT-2021-12008

Name of the Vulnerable Software and Affected Versions: Jansson versions through 2.13.1 Description: An issue was discovered due to a parsing error in json loads, resulting in an out-of-bounds read-access bug. This issue only occurs when a programmer fails to follow the API specification...

7.5CVSS9.5AI score0.01718EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/26 12:00 a.m.•9 views

CVE-2020-36325: Out-of-bounds Read

An issue was discovered in Jansson through 2.13.1. Due to a parsing error in jsonloads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fails to follow the API specification...

7.5CVSS5.8AI score0.01718EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/04/19 12:00 a.m.•45 views

IBM Spectrum Protect Server Stack Buffer Overflow Vulnerability

IBM Spectrum Protect is a data protection platform that provides organizations with a single point of control and management for backup and recovery.IBM Spectrum Protect Server is the server of the... A stack buffer overflow vulnerability exists in IBM Spectrum Protect Server versions 7.1 and 8.1...

4.4CVSS7AI score0.00258EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/19 12:00 a.m.•29 views

ezXML out-of-bounds write vulnerability (CNVD-2021-30593)

ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in libezxml.a in ezXML version 0.8.6. The vulnerability stems from a memory handling error performed by the ezxmlparsestr function when parsing a specially crafted XML file. An attacker could exploit the...

6.5CVSS6.5AI score0.01106EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2021/04/16 6:15 p.m.•13 views

DEBIAN-CVE-2021-31347

An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxmlparsestr performs incorrect memory handling while parsing crafted XML files writing outside a memory region created by mmap...

6.5CVSS6.3AI score0.01106EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•12 views

PT-2021-4623 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version CGAL-5.1.1 Description: The issue is related to an error in parsing Nef polygons in the PM io parser::read vertex function of the CGAL library. This can allow a remote attacker to access confidential data, compromise its...

10CVSS9.2AI score0.03292EPSS
SaveExploits42References129
osv_azl
osv_azl
•added 2021/02/16 5:15 p.m.•18 views

AZL-40768 CVE-2021-23841 affecting package shim-unsigned-x64 for versions less than 15.8-5

The OpenSSL public API function X509issuerandserialhash attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field which might occur if the...

5.9CVSS6.1AI score0.0741EPSS
SaveExploits0References1
Rows per page
Query Builder