Lucene search
K

8 matches found

OSV
OSV
added 2025/04/08 12:15 a.m.2 views

CVE-2025-3389

A vulnerability, which was classified as problematic, has been found in hailey888 oasystem up to 2025.01.01. This issue affects the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument menu leads to...

6.1CVSS3.9AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.1 views

The vulnerability of the com.google.code.gson:gson library, which allows a attacker to perform a type of attack known as a “Denial-of-Service” (DoS) attack.

The vulnerability of the com.google.code.gson:gson library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute a DoS attack...

7.7CVSS0.0226EPSS
Exploits0References8Affected Software25
RedHat Linux
RedHat Linux
added 2022/06/23 10:41 a.m.3 views

com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes. This issue may lead to availability attacks...

7.7CVSS7.1AI score0.0226EPSS
Exploits0References4
OSV
OSV
added 2022/05/20 11:3 a.m.2 views

OESA-2022-1663 google-gson security update

Gson is a Java library that can be used to convert a Java object into its JSON representation. It can also be used to convert a JSON string into an equivalent Java object. Gson can work with arbitrary Java objects including pre-existing objects that you do not have source-code of. There are a few...

7.7CVSS7.1AI score0.0226EPSS
Exploits0References2
OSV
OSV
added 2022/05/01 4:15 p.m.0 views

UBUNTU-CVE-2022-25647

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS7.1AI score0.0226EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2022/05/01 3:30 p.m.2 views

CVE-2022-25647 Deserialization of Untrusted Data

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS7.3AI score0.0226EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2022/05/01 3:25 p.m.1 views

CVE-2022-25647

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

7.7CVSS5.3AI score0.0226EPSS
Exploits0References9
CNNVD
CNNVD
added 2022/05/01 12:0 a.m.1 views

gson 代码问题漏洞

gson is a Java library that can be used to convert Java objects to their JSON representation. A security vulnerability exists in com.google.code.gson:gson versions prior to 2.8.9 that stems from the writeReplace method deserializing untrusted data, which can lead to a DoS attack...

7.7CVSS7.8AI score0.0226EPSS
Exploits0References30
Rows per page
Query Builder