Lucene search
K

13 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/01 12:0 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-44660

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and...

8.7CVSS5.5AI score0.00421EPSS
Exploits1References3
NVD
NVD
added 2026/05/27 9:16 p.m.11 views

CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS0.00421EPSS
Exploits1References3
OSV
OSV
added 2026/05/27 9:16 p.m.8 views

UBUNTU-CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2026/05/27 8:42 p.m.7 views

CVE-2026-44660

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References4Affected Software1
EUVD
EUVD
added 2026/05/27 8:42 p.m.8 views

EUVD-2026-32663

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/05/27 8:42 p.m.7 views

CVE-2026-44660 UltraJSON: Memory Leak in ujson.dump() on Write Failure

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/05/12 10:25 p.m.7 views

UltraJSON has a Memory Leak in ujson.dump() on Write Failure

Summary When ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operation leaks the full size of the serialized payload. Code that uses ujson.dumps rather than ujson.dump or...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References5Affected Software1
Snyk
Snyk
added 2026/05/12 10:25 p.m.5 views

Missing Release of Memory after Effective Lifetime

Overview ujson is an Ultra fast JSON encoder and decoder for Python Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the objToJSONFile function in objToJSON.c, when a write operation to a file-like object fails and raises an exception. An...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2023/05/29 8:3 p.m.9 views

CVE-2023-32687 Insufficiently Protected ChatBot Credentials in tgstation-server

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround,...

7.7CVSS7.3AI score0.00634EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2022/12/20 12:0 a.m.16 views

Tenable Nessus Network Monitor 5.11.0, 5.11.1, 5.12.0 Code Execution Vulnerability (TNS-2020-09) - Windows

Tenable Nessus Network Monitor is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.8CVSS7.7AI score0.00356EPSS
Exploits0References1
OSV
OSV
added 2021/12/01 5:15 p.m.2 views

CVE-2021-42776

CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import...

7.7CVSS5.8AI score0.00773EPSS
Exploits0References2
OSV
OSV
added 2021/09/09 12:15 p.m.12 views

CVE-2021-39458

Triggering an error page of the import process in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user has to alternate the files of a vaild file backup. This leads of leaking the database credentials in the environment variables...

6.5CVSS6.6AI score0.01152EPSS
Exploits1References2
OSV
OSV
added 2021/09/09 12:15 p.m.26 views

CVE-2021-39459

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code...

7.2CVSS7.5AI score0.04554EPSS
Exploits1References2
Rows per page
Query Builder