5501 matches found
CVE-2023-35110
CVE-2023-35110 affects jjson up to version 0.1.7, with a DoS risk from crafted objects that use cyclic dependencies or deeply nested structures. The NVD entry lists CVSS v3.1 base score 7.5 (NETWORK, LOW attack complexity, NONE privileges, availability impact HIGH). Public references point to the...
pbJson 缓冲区错误漏洞
pbJson is an Inductive AS open source JSON library written in Java and compatible with progsbase. A security vulnerability exists in pbJson 0.4.0 and earlier versions that originated from allowing an attacker to cause a denial of service through the use of objects with cyclic dependencies...
Jettison 缓冲区错误漏洞
Jettison is jettison-json open source Jettison is a Java library . Jettison is a Java library that is used to convert XML to JSON with the help of StAX. Jettison 3.3 and earlier versions of a security vulnerability , the vulnerability stems from allowing an attacker to cause a denial of service...
CVE-2023-34613: Out-of-bounds Write
An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-35116
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...
CVE-2023-34616
An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-35110
An issue was discovered jjson thru 0.1.7 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34609
An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34611: Out-of-bounds Write
An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-35116: Allocation of Resources Without Limits or Throttling
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...
CVE-2023-34610: Out-of-bounds Write
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
json-io 缓冲区错误漏洞
json-io is a json, java conversion library from the individual developer John DeRegnaucourt. A security vulnerability exists in json-io version 4.14.0 and earlier, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with cyclic...
CVE-2023-34610
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
PT-2023-24950 · Sojo · Sojo
Name of the Vulnerable Software and Affected Versions: sojo versions 1.1.1 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For sojo versions 1.1.1 and earlier, at the...
CVE-2023-34613
An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...
CVE-2023-34616
CVE-2023-34616 affects pbjson up to version 0.4.0. A crafted object using cyclic dependencies can cause a DoS or other unspecified impacts. Root cause is processing objects with cycles. Impact is denial of service (CVSS 7.5, HIGH). There is no patch version stated in the provided documents; recom...
mJson 缓冲区错误漏洞
mJson is an extremely lightweight Java JSON library from Borislav Iordanov's personal developer. A security vulnerability exists in mJson 1.4.1 and earlier versions that allows an attacker to cause a denial of service by using objects with circular dependencies...
CVE-2023-34624
An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...