PT-2023-9178

Name of the Vulnerable Software and Affected Versions jtidy versions thru r938 Description The issue is related to a stack overflow error in the jtidy library, which is used for cleaning and validating HTML code. Exploitation of this issue can allow a remote attacker to cause a denial of service ...

CVE-2023-34613

An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34610: Out-of-bounds Write

An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

json-io 缓冲区错误漏洞

json-io is a json, java conversion library from the individual developer John DeRegnaucourt. A security vulnerability exists in json-io version 4.14.0 and earlier, which stems from a vulnerability that allows an attacker to cause a denial of service through the use of objects with cyclic...

CVE-2023-34610

CVE-2023-34610 affects json-io up to version 4.14.0. A crafted object that uses cyclic dependencies can cause a denial of service or other unspecified impacts; root cause is the vulnerability in handling cyclic object graphs. Public references show a related advisory and issue detail (e.g., GitHu...

ph-commons 缓冲区错误漏洞

ph-commons is a set of shared Java 11+ libraries used in many other projects by the individual developer Philip Helger. A security vulnerability exists in ph-commons ph-json 9.5.5 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service by using...

CVE-2023-34617

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34612: Out-of-bounds Write

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

PT-2023-24954 · Genson · Genson

Name of the Vulnerable Software and Affected Versions: genson versions 1.6 and earlier Description: An issue allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies or have deeply nested structures. Recommendations: For genson...

CVE-2023-34617: Out-of-bounds Write

An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34620: Out-of-bounds Write

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34611

An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34612

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34623: Out-of-bounds Write

An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34620

An issue was discovered hjson thru 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies...

CVE-2023-34617

CVE-2023-34617 affects the Python/Java library genson up to version 1.6 and earlier. An attacker can trigger a denial of service (DoS) by providing crafted objects that use cyclic dependencies (also variants with deeply nested structures), per multiple sources. CVSSv3.1 base score is 7.5 (HIGH): ...

CVE-2023-35116

Removed by vendor...

CVE-2023-35116

jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure...