Lucene search
+L

11124 matches found

NVD
NVD
•added 2022/03/11 7:15 a.m.•44 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS0.0486EPSS
SaveExploits1References7
OSV
OSV
•added 2022/03/11 7:15 a.m.•55 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS6.7AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•9 views

CVE-2022-23625: Improper Handling of Exceptional Conditions

Wire-ios is a messaging application using the wire protocol on apple's ios platform. In versions prior to 3.95 malformed resource identifiers may render the iOS Wire Client completely unusable by causing it to repeatedly crash on launch. These malformed resource identifiers can be generated and...

6.5CVSS6.5AI score0.01239EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/03/11 12:00 a.m.•73 views

CVE-2020-36518

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.7AI score0.0486EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/11 12:00 a.m.•8 views

CVE-2020-36518: Out-of-bounds Write

jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects...

7.5CVSS7.2AI score0.0486EPSS
SaveExploits1References3
OSS-Fuzz
OSS-Fuzz
•added 2022/03/10 5:47 p.m.•8 views

json-java:JsonJavaFuzzer: Uncaught exception in java.base/java.util.Arrays.copyOfRange

Project: https://github.com/stleary/JSON-java.git Detailed Report: https://oss-fuzz.com/testcase?key=6529506154774528 Project: json-java Fuzzing Engine: libFuzzer Fuzz Target: JsonJavaFuzzer Job Type: libfuzzerasanjson-java Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/03/08 12:44 p.m.•17 views

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.deepScan

Detailed Report: https://oss-fuzz.com/testcase?key=5629224285765632 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.deepScan...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/03/07 8:43 p.m.•15 views

javaparser:parseFuzzer: Uncaught exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5363810070822912 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash...

5.9AI score
SaveExploits0
OSS-Fuzz
OSS-Fuzz
•added 2022/03/05 3:44 p.m.•11 views

fastjson2:JsonFuzzer: Uncaught exception in com.code_intelligence.jazzer.sanitizers.RegexInjection.hookInternal

Detailed Report: https://oss-fuzz.com/testcase?key=5298419680280576 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State:...

5.9AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/03/04 6:15 p.m.•9 views

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

7.1CVSS6.5AI score0.00911EPSS
SaveExploits0References5
NVD
NVD
•added 2022/03/04 6:15 p.m.•28 views

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

7.1CVSS0.00911EPSS
SaveExploits0References4
OSV
OSV
•added 2022/03/04 6:15 p.m.•5 views

DEBIAN-CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

5.5CVSS6.5AI score0.00911EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/04 6:15 p.m.•43 views

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

5.5CVSS6.2AI score
SaveExploits0References4
Prion
Prion
•added 2022/03/04 6:15 p.m.•36 views

Design/Logic Flaw

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

7.1CVSS5.3AI score0.00911EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2022/03/04 6:15 p.m.•17 views

UBUNTU-CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

5.5CVSS6.7AI score0.00911EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2022/03/04 4:30 p.m.•13 views

fastjson2:JsonFuzzer: Uncaught exception in com.alibaba.fastjson.JSONPath.getPropertyValue

Detailed Report: https://oss-fuzz.com/testcase?key=6551250819219456 Project: fastjson2 Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanfastjson2 Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash State: com.alibaba.fastjson.JSONPath.getPropertyValue...

5.9AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2022/03/04 2:58 p.m.•326 views

Exploit for Code Injection in Vmware Spring_Cloud_Gateway

CVE-2022-22947-RcePOC Batch URL detection for Spring-Clou...

10CVSS8AI score0.98253EPSS
SaveExploits54
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/04 12:00 a.m.•4 views

CVE-2021-20302: Improper Input Validation

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

7.1CVSS6.3AI score0.00911EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/04 12:00 a.m.•1 views

PT-2022-37436

Name of the Vulnerable Software and Affected Versions spacewalk-java versions prior to 4.2.33-1 susemanager-sync-data versions prior to 4.2.11-1 Description The issue is related to handling a null pointer exception when syncing Ubuntu errata. There is also a change in CentOS 8 EOL URLs to vault. ...

5.6AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/03/04 12:00 a.m.•47 views

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

6.2AI score0.00911EPSS
SaveExploits0References4
Rows per page
Query Builder