Lucene search
K

8 matches found

Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.5 views

PT-2026-42175

Name of the Vulnerable Software and Affected Versions Twig affected versions not specified Description The column filter passes input directly to the native PHP array column function. When array elements are objects, array column reads properties directly, which bypasses the...

2.1CVSS5.8AI score
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2026-34043

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service DoS vulnerabili...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2026/03/31 3:15 a.m.0 views

CVE-2026-34043

Serialize JavaScript to a superset of JSON that includes regular expressions and functions. Prior to version 7.0.5, there is a Denial of Service DoS vulnerability caused by CPU exhaustion. When serializing a specially crafted "array-like" object an object that inherits from Array.prototype but ha...

7.5CVSS5.8AI score0.00018EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/27 12:0 a.m.2 views

PT-2026-28596

Name of the Vulnerable Software and Affected Versions serialize-javascript versions prior to 7.0.5 Description This issue involves a Denial of Service DoS caused by CPU exhaustion. When serializing a specially crafted "array-like" object – an object inheriting from Array.prototype with a very lar...

7.5CVSS5.9AI score0.00018EPSS
Exploits0References194
Zero Day Initiative
Zero Day Initiative
added 2017/05/10 12:0 a.m.71 views

(Pwn2Own) Microsoft Chakra Array Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Chakra. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

6.8CVSS2.3AI score0.38059EPSS
Exploits2References1
Check Point Advisories
Check Point Advisories
added 2016/08/04 12:0 a.m.0 views

PHP7 Unserialization Use After Free

A Use-After-Free vulnerability exists in the Standard PHP library's unserializion of array objects, due to an internal array self-reference. An attacker could exploit this vulnerability by supplying crafted input to a PHP application. Successful exploitation may result in remote execution of...

4.9AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Sun Java Runtime Environment 1.3/1.4/1.5 Nested Array Objects Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. This issue is reported to affect Java Runtime...

7.1AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2013/02/01 12:0 a.m.44 views

(Mobile Pwn2Own) Apple Safari shiftCount/splice Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Arr...

7.5CVSS4.5AI score0.11812EPSS
Exploits3References2
Rows per page
Query Builder