mJson 缓冲区错误漏洞

mJson is an extremely lightweight Java JSON library from Borislav Iordanov's personal developer. A security vulnerability exists in mJson 1.4.1 and earlier versions that allows an attacker to cause a denial of service by using objects with circular dependencies...

PT-2023-24948 · Mjson · Mjson

Name of the Vulnerable Software and Affected Versions: mjson versions 1.4.1 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For mjson versions 1.4.1 and earlier, at th...

JSONUtil 缓冲区错误漏洞

JSONUtil is a library of JSON generation and parsing utilities for Java from the individual developer Bill Davidson. A security vulnerability exists in JSONUtil 5.0 and earlier versions that could allow an attacker to cause a denial of service through the use of circularly dependent objects...

CVE-2023-35110

CVE-2023-35110 affects jjson up to version 0.1.7, with a DoS risk from crafted objects that use cyclic dependencies or deeply nested structures. The NVD entry lists CVSS v3.1 base score 7.5 (NETWORK, LOW attack complexity, NONE privileges, availability impact HIGH). Public references point to the...

CVE-2023-34612

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34613

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-24947 · Json-Io · Json-Io

Name of the Vulnerable Software and Affected Versions: json-io versions 4.14.0 and earlier Description: An issue was discovered that allows attackers to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies. Recommendations: For json-io versions...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34615

An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34624

An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-35116

Removed by vendor...

CVE-2023-34611

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34616

An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

SOJO 缓冲区错误漏洞

SOJO is a simple old Java object from Martin Goldhahn's personal developer. A security vulnerability exists in SOJO 1.1.1 and earlier versions, which stems from allowing an attacker to cause a denial of service through the use of objects with cyclic dependencies...

PT-2023-24956

Name of the Vulnerable Software and Affected Versions hjson versions 3.0.0 and earlier Description An issue in hjson allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies or have deeply nested structures. Recommendations For...

CVE-2023-34614

An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-24952 · Jsonutil · Jsonutil

Name of the Vulnerable Software and Affected Versions: JSONUtil versions 5.0 and earlier Description: An issue was discovered in JSONUtil that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies or have deeply nested...

CVE-2023-34617

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-9178 · Jtidy +3 · Jtidy +3

Name of the Vulnerable Software and Affected Versions: jtidy versions thru r938 Description: The issue is related to a stack overflow error in the jtidy library, which is used for cleaning and validating HTML code. Exploitation of this issue can allow a remote attacker to cause a denial of servic...