CVE-2020-14335

CVE-2020-14335 describes a vulnerability in Red Hat Satellite where a privileged attacker could read OMAPI secrets via the ISC DHCP server used by Smart-Proxy, potentially gaining control of DHCP records on the network. The CVE is listed with a local attack vector and a low to moderate overall ri...

CVE-2020-14335

A flaw was found in Red Hat Satellite, which allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy. This flaw allows an attacker to gain control of DHCP records from the network. The highest threat from this vulnerability is to system availability...

Denial Of Service (DoS)

json-smart is vulnerable to denial of service DoS. An unhandled ArrayIndexOutOfBoundsException thrown from the indexOf function of JSONParserByteArray allows a remote attacker to crash the program or leak confidential information...

Logic Flaw Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A logic flaw vulnerability exists in the Smart Meter Integrated Management System SMIMS of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitiv...

PT-2021-9717 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite affected versions not specified Description: A flaw in Red Hat Satellite allows a privileged attacker to read OMAPI secrets through the ISC DHCP of Smart-Proxy, potentially gaining control of DHCP records from the network. T...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

DEBIAN-CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

Cross site request forgery (csrf)

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

UBUNTU-CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

Github json-smart-v1 缓冲区错误漏洞

Github json-smart-v1 is a Github open source application . Provides all non-indexed data in the data store as serialized JSON messages stored in the columns function . A security vulnerability exists in JSON Smart versions 1.3 and 2.4, which originates in the indexOf function of JSONParserByteArr...

CVE-2021-31684

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service DOS via a crafted web request...

CVE-2021-31684

JSON Smart contains a denial-of-service vulnerability in the indexOf function of JSONParserByteArray, affecting versions 1.3 and 2.4. A crafted web request can trigger the issue. Public advisories note fixes in later releases (e.g., 1.3.3/2.4.5 and vendor-specific patches such as Debian 2.2-2+deb...

SQL Injection Vulnerability in Campus Intelligent Control of Shenzhen Magic Ball Technology Co.

Campus Smart Control is a combination of face recognition terminal, pass gate, face recognition algorithm, smart campus management system, education cloud platform, and interactive classroom system. Shenzhen Magic Ball Technology Co., Ltd Campus Smart Control has SQL injection vulnerability...

SQL Injection Vulnerability in Smart Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-39314)

Beijing Byzoro Network Technology Co., Ltd. was established in 2005-04-06, the company's scope of business includes technology development, technology transfer, technical consulting, technical services; computer system services and so on. A SQL injection vulnerability exists in the Smart...

SQL Injection Vulnerability in the Integrated Management System of Beijing Smart Vision Technology Industry Co.

Beijing Wisdom Vision Technology Industry Co., Ltd. is a participant in the drafting of national standards for smart city and one-card, and is a leading provider of Internet one-card overall solutions in China with more than ten years of experience in the field of one-card technology and the...

3S-Smart Software Solutions CODESYS Control runtime system buffer overflow vulnerability (CNVD-2021-37673)

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS...