Lucene search
+L

6603 matches found

OSV
OSV
•added 2023/08/23 1:19 p.m.•82 views

GHSA-8RJ5-2857-877J json2xml Uncaught Exception vulnerability

The json2xml package for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

8.7CVSS7.4AI score0.01321EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2023/08/23 1:19 p.m.•37 views

json2xml Uncaught Exception vulnerability

The json2xml package for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.5CVSS6.7AI score0.01321EPSS
SaveExploits1References8Affected Software1
attackerkb
attackerkb
•added 2023/08/23 7:15 a.m.•40 views

CVE-2023-41104

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

6.5CVSS5.8AI score0.00595EPSS
SaveExploits0References4
Prion
Prion
•added 2023/08/23 7:15 a.m.•27 views

Authentication flaw

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

6.4CVSS6.6AI score0.00595EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
•added 2023/08/23 12:00 a.m.•22 views

libvmod-digest 缓冲区错误漏洞

libvmod-digest is used to compute HMAC, message digests. A security vulnerability exists in libvmod-digest versions prior to 1.0.3, which stems from an out-of-bounds memory access during base64 decoding, leading to authentication bypass and information disclosure...

6.5CVSS6.4AI score0.00595EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/08/23 12:00 a.m.•39 views

CVE-2023-41104

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

6.7AI score0.00595EPSS
SaveExploits0References3
Mend
Mend
•added 2023/08/23 12:00 a.m.•0 views

CVE-2023-41104

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

6.9CVSS0.00595EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/23 12:00 a.m.•3 views

CVE-2023-41104: Improper Restriction of Operations within the Bounds of a Memory Buffer

libvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading to both authentication bypass and information disclosure; however, the exact attack surface will depend on the particular VCL Varnish Configuration...

6.5CVSS6.6AI score0.00595EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/22 7:16 p.m.•14 views

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.5CVSS5.8AI score0.01321EPSS
SaveExploits1References5
NVD
NVD
•added 2023/08/22 7:16 p.m.•48 views

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.5CVSS7.5AI score0.01321EPSS
SaveExploits1References4
PyPA
PyPA
•added 2023/08/22 7:16 p.m.•12 views

PYSEC-2023-149

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.5CVSS6.9AI score0.01321EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2023/08/22 12:00 a.m.•19 views

Python 代码问题漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. A security vulnerability exists in Python version 3.12.0, which stems from an error in the decoding of the json2xm...

7.5CVSS7.3AI score0.01321EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/08/22 12:00 a.m.•60 views

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.6AI score0.01321EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/08/22 12:00 a.m.•15 views

PT-2023-12774 · Json2Xml · Json2Xml

Name of the Vulnerable Software and Affected Versions: json2xml versions through 3.12.0 Description: The issue allows an error in typecode decoding, enabling a remote attack that can lead to an exception, causing a denial of service. Recommendations: For versions through 3.12.0, consider updating...

8.7CVSS7.2AI score0.01321EPSS
SaveExploits1References11
OSV
OSV
•added 2023/08/22 12:00 a.m.•24 views

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.1AI score
SaveExploits0References6
Mend
Mend
•added 2023/08/22 12:00 a.m.•0 views

CVE-2022-25024

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

8.7CVSS0.01321EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/22 12:00 a.m.•1 views

CVE-2022-25024: Improper Check for Unusual or Exceptional Conditions

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service...

7.5CVSS7.3AI score0.01321EPSS
SaveExploits1References2
Amazon
Amazon
•added 2023/08/21 12:00 a.m.•11 views

Important: containerd

Issue Overview: http2/hpack: avoid quadratic complexity in hpack decoding CVE-2022-41723 Large handshake records may cause panics in crypto/tls. Both clients and servers may send large TLS handshake records which cause servers and clients, respectively, to panic when attempting to construct...

9.8CVSS7.6AI score0.04561EPSS
SaveExploits0
CNVD
CNVD
•added 2023/08/17 12:00 a.m.•18 views

Faad2 buffer overflow vulnerability (CNVD-2026-15394)

Faad2 is a freeware advanced audio Aac decoder. It is used for Sbr decoding. Faad2 suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. An attacker could exploit this vulnerability to execute arbitrary code and cause a...

6.5CVSS7.5AI score0.01018EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2023/08/17 12:00 a.m.•3 views

PT-2023-35509

Name of the Vulnerable Software and Affected Versions perl-Cpanel-JSON-XS versions prior to 4.36 Description The issue concerns a security problem with decoding hash keys without ending. Additionally, there were issues with utf8 object stringification, c89 compilation regression, and a croak leak...

5.8AI score
SaveExploits0References2
Rows per page
Query Builder