Lucene search
K

421 matches found

OSV
OSV
added 2016/09/26 2:59 p.m.5 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS9.6AI score0.07577EPSS
Exploits2References8
OSV
OSV
added 2016/09/26 2:59 p.m.1 views

DEBIAN-CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS8.1AI score0.07577EPSS
Exploits2References1
NVD
NVD
added 2016/09/26 2:59 p.m.8 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS9.6AI score0.07577EPSS
Exploits2References8
UbuntuCve
UbuntuCve
added 2016/09/26 2:59 p.m.16 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS7.8AI score0.07577EPSS
Exploits2References3
ATTACKERKB
ATTACKERKB
added 2016/09/26 2:59 p.m.1 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS6.5AI score0.07577EPSS
Exploits2References10
Prion
Prion
added 2016/09/26 2:59 p.m.17 views

Heap overflow

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

7.5CVSS8.2AI score0.07577EPSS
Exploits2References8Affected Software5
Debian CVE
Debian CVE
added 2016/09/26 2:0 p.m.26 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.8CVSS9.7AI score0.07577EPSS
Exploits2
CVE
CVE
added 2016/09/26 2:0 p.m.208 views

CVE-2016-4303

CVE-2016-4303 affects iperf/iperf3 and the cJSON-UTF8/UTF-16 parsing path; the vulnerability allows denial of service or arbitrary code execution via a crafted JSON string that triggers a heap-based buffer overflow. The connected docs confirm downstream patches: upstream releases addressed the is...

9.8CVSS9.5AI score0.07577EPSS
Exploits2References8Affected Software1
Cvelist
Cvelist
added 2016/09/26 2:0 p.m.16 views

CVE-2016-4303

The parsestring function in cjson.c in the cJSON library mishandles UTF8/16 strings, which allows remote attackers to cause a denial of service crash or execute arbitrary code via a non-hex character in a JSON string, which triggers a heap-based buffer overflow...

9.6AI score0.07577EPSS
Exploits2References8
Positive Technologies
Positive Technologies
added 2016/07/05 12:0 a.m.2 views

PT-2016-5883 · Cjson +2 · Cjson +2

Name of the Vulnerable Software and Affected Versions: cJSON library affected versions not specified Description: The issue is related to the mishandling of UTF8/16 strings by the parse string function in the cJSON library. This allows remote attackers to cause a denial of service crash or execut...

9.8CVSS8.1AI score0.07577EPSS
Exploits2References33
0day.today
0day.today
added 2016/03/16 12:0 a.m.424 views

OpenSSH 7.2p1 - Authenticated xauth Command Injection

Exploit for multiple platform in category remote exploits ''' Author: Ref: https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115 Version: 0.2 Date: Mar 3rd, 2016 Tag: openssh xauth command injection may lead to forced-command and /bin/false bypass Overview -------- Name: openssh Vendor:...

7.1AI score0.50367EPSS
Exploits13
Prion
Prion
added 2015/06/22 6:59 p.m.9 views

Buffer overflow

The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service crash via a JSON string with a \ backslash followed by a terminator, as demonstrated by "\\0", which triggers a buffer overflow and over-read...

5CVSS7.7AI score0.01017EPSS
Exploits1References5Affected Software1
OpenVAS
OpenVAS
added 2010/07/23 12:0 a.m.18 views

Fedora Update for python-cjson FEDORA-2010-10728

Check for the Version of python-cjson OpenVAS Vulnerability Test Fedora Update for python-cjson FEDORA-2010-10728 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.8CVSS6.4AI score0.00692EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2010/07/23 12:0 a.m.17 views

Fedora Update for python-cjson FEDORA-2010-10728

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.5AI score0.00692EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2010/07/23 12:0 a.m.18 views

Fedora Update for python-cjson FEDORA-2010-10710

Check for the Version of python-cjson OpenVAS Vulnerability Test Fedora Update for python-cjson FEDORA-2010-10710 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

6.8CVSS6.4AI score0.00692EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2010/07/23 12:0 a.m.22 views

Fedora Update for python-cjson FEDORA-2010-10710

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.8CVSS6.5AI score0.00692EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2010/07/21 12:0 a.m.25 views

Fedora 13 : python-cjson-1.0.5-5.fc13 (2010-10728)

Sat Jul 3 2010 Felix Schwarz - 1.0.5-5 - CVE-2010-1666 fixed by including a patch from Ubuntu, see Launchpad 585274 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

6.8CVSS5.4AI score0.00692EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2010/07/21 12:0 a.m.26 views

Fedora 12 : python-cjson-1.0.5-5.fc12 (2010-10710)

Sat Jul 3 2010 Felix Schwarz - 1.0.5-5 - CVE-2010-1666 fixed by including a patch from Ubuntu, see Launchpad 585274 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format...

6.8CVSS5.4AI score0.00692EPSS
Exploits1References3
Fedora
Fedora
added 2010/07/20 10:40 p.m.17 views

[SECURITY] Fedora 13 Update: python-cjson-1.0.5-5.fc13

JSON stands for JavaScript Object Notation and is a text based lightweight data exchange format which is easy for humans to read/write and for machines to parse/generate. JSON is completely language independent and has multiple implementations in most of the programming languages, making it ideal...

6.8CVSS0.4AI score0.00692EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2010/07/13 12:0 a.m.22 views

Debian DSA-2068-1 : python-cjson - buffer overflow

Matt Giuca discovered a buffer overflow in python-cjson, a fast JSON encoder/decoder for Python. This allows a remote attacker to cause a denial of service application crash through a specially crafted Python script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

6.8CVSS5.8AI score0.00692EPSS
Exploits1References3
Rows per page
Query Builder