1547 matches found
Socket.IO 代码问题漏洞
Socket.IO is a JavaScript library for real-time web applications from Socket.IO. A security vulnerability exists in Socket.IO versions prior to 4.2.3, which stems from a specially crafted Socket.IO packet that can kill Node.js processes by triggering an uncaught exception on the Socket.IO server...
CVE-2023-32695: Improper Input Validation
socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3...
GHSA-CQMJ-92XF-R6R9 Insufficient validation when decoding a Socket.IO packet
Impact A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. TypeError: Cannot convert object to primitive value at Socket.emit node:events:507:25 at .../nodemodules/socket.io/lib/socket.js:531:14 Patches A fix has been...
CVE-2023-31125
A flaw was found in Engine.IO, where it is vulnerable to a denial of service caused by an uncaught exception. This flaw allows an attacker to cause a denial of service by sending a specially crafted HTTP request...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A denial of service vulnerability exists in Google Android, which originates from an uncaught exception in the registerPhoneAccount of the PhoneAccountRegistrar.java file when parsing persistent user data, which can be...
CVE-2023-31125
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the socket.io parent package. Older versions are not impacted. A...
Cross site scripting
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the socket.io parent package. Older versions are not impacted. A...
CVE-2023-31125
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the "socket.io" parent package. Older versions are not impacted. A...
Engine.IO 安全漏洞
Engine.IO is Engine.IO open source implementation of a transport-based cross-browser/cross-device bi-directional communication layer. A security vulnerability exists in Engine.IO versions 5.1.0 through 6.4.1, which stems from a specially crafted HTTP request that can trigger an uncaught exception...
CVE-2023-31125: Uncaught Exception
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerability was introduced in version 5.1.0 and included in version 4.1.0 of the socket.io parent package. Older versions are not impacted. A...
SUSE CVE-2023-2251
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
GHSA-F9XV-Q969-PQX4 Uncaught Exception in yaml
Uncaught Exception in GitHub repository eemeli/yaml starting at version 2.0.0-5 and prior to 2.2.2...
CVE-2023-2251
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
CVE-2023-2251
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
DEBIAN-CVE-2023-2251
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
Code injection
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
CVE-2023-2251
Uncaught Exception in GitHub repository eemeli/yaml prior to 2.0.0-5...
eemeli yaml 安全漏洞
eemeli yaml is a C++ library for parsing and generating YAML documents that supports the latest YAML specification and provides a simple API to read and write YAML documents. A security vulnerability exists in eemeli yaml prior to version 2.2.2, which stems from an uncaught exception in the...
PT-2023-18553
Name of the Vulnerable Software and Affected Versions eemeli/yaml versions prior to 2.2.2 Description The issue is related to an Uncaught Exception in the GitHub repository eemeli/yaml. Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue...
