SUSE: Security Advisory (SUSE-SU-2019:3337-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSON.toJSONString

Detailed Report: https://oss-fuzz.com/testcase?key=6210482458460160 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSON.toJSONString...

PT-2021-8147

Name of the Vulnerable Software and Affected Versions Newtonsoft.Json versions prior to 13.0.1 Description The issue is related to a mishandling of exceptional conditions vulnerability in the Newtonsoft.Json library. Crafted data passed to the JsonConvert.DeserializeObject method may trigger a...

Buffer overflow

The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far...

CVE-2020-28759

The CVE-2020-28759 entry concerns OAID Tengine lite v1.0 where the serializer module is reported to have a Buffer Overflow causing a crash. This is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the core detail: the serializer module can crash due to a buffer overflow; the...

CVE-2020-28759

The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far...

OAID Tengine Lite Buffer Error Vulnerability

OAID Tengine Lite is a tool from the OAID organization that implements the need for fast and efficient deployment of deep learning neural network models on embedded devices. OAID Tengine Lite 5.0.55.2 suffers from a buffer error vulnerability that stems from a buffer overflow and crash in the...

CVE-2020-28759: Buffer Copy without Checking Size of Input

The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far...

PT-2020-17040 · Oaid · Oaid Tengine Lite

Name of the Vulnerable Software and Affected Versions: OAID Tengine lite version v1.0 Description: The serializer module in OAID Tengine lite has a reported Buffer Overflow issue, which can cause a crash. However, there is some uncertainty regarding the existence of proof for this overflow...

Fedora 32 : php-symfony4 (2020-16eb328853)

Version 4.4.13 2020-09-02 - security CVE-2020-15094 Remove headers with internal meaning from HttpClient responses mpdude - bug 38024 Console Fix undefined index for inconsistent command name definition chalasr - bug 38023 DI fix inlining of non-shared services nicolas-grekas - bug 38020...

Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate...

GHSA-CHH2-RVHG-WQWR Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation Remove the package from your environment and evaluate...

PT-2020-21242

Name of the Vulnerable Software and Affected Versions json-serializer version 2.0.10 Description The issue concerns malicious code in version 2.0.10 of the json-serializer package. When executed in a browser, this code enumerates sensitive fields such as password, cvc, and cardnumber from forms a...

Malicious Package

json-serializer is a malicious package. The package contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.10 of this module is found installed yo...

GHSA-7XFQ-XH6V-4MRM Malicious Package in json-serializer

Version 2.0.10 of json-serializer contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 2.0.10 of this module is found installed yo...

PT-2020-21140

Name of the Vulnerable Software and Affected Versions json-serializer version 2.0.10 Description The issue concerns malicious code in version 2.0.10 of the json-serializer module. When executed in a browser, this code can extract sensitive information such as password, cvc, and cardnumber fields...

eos buffer error vulnerability

eos is an open source smart contract platform. A stack overflow vulnerability exists in the 'abiserializer' function in versions after eos commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168. An attacker can exploit this vulnerability by sending a network request to attack an eos network node...

firestore:firestore_serializer_fuzzer: Crash in pb_release_single_field

Detailed Report: https://oss-fuzz.com/testcase?key=5691535105720320 Project: firestore Fuzzing Engine: afl Fuzz Target: serializerfuzzer Job Type: aflasanfirestore Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xfffffffffffffff1 Crash State: pbreleasesinglefield pbrelease pbdecode...

eos buffer overflow vulnerability

eos is an open source smart contract platform. A stack overflow vulnerability exists in the 'abiserializer' function in versions after eos commit f1545dd0ae2b77580c2236fdb70ae7138d2c7168. An attacker can exploit this vulnerability by sending a network request to attack an eos network node...