Lucene search
+L

3995 matches found

CVE
CVE
added 2023/08/10 12:52 p.m.47 views

CVE-2023-37983

CVE-2023-37983 affects WordPress Art Direction plugin (

6.5CVSS5.5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2023/08/10 3:17 a.m.25 views

Denial Of Service (DoS)

com.fasterxml.jackson.dataformat: jackson-dataformat-toml is vulnerable to Denial of Service DoS attacks. The vulnerability is due a lack of a max nesting depth; If the TOML parser is run on user supplied input an attacker is able to cause a stackoverflow, resulting in an application crash...

7.5CVSS6.7AI score0.00914EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2023/08/08 6:30 p.m.55 views

GHSA-RG2C-CFXV-QP6F Denial of service in jackson-dataformat-toml

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

8.6CVSS7.3AI score0.00914EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2023/08/08 6:30 p.m.36 views

Denial of service in jackson-dataformat-toml

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

7.5CVSS7.3AI score0.00914EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2023/08/08 6:15 p.m.33 views

CVE-2023-3894

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

7.5CVSS6.3AI score0.00914EPSS
SaveExploits0References3
Prion
Prion
added 2023/08/08 6:15 p.m.16 views

Input validation

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

5CVSS7.3AI score0.00914EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2023/08/08 4:59 p.m.81 views

CVE-2023-3894

CVE-2023-3894 affects FasterXML jackson-dataformats-text when parsing TOML, enabling potential DoS via stack overflow. IBM Cloud Pak System products list this CVE among vulnerabilities and recommend upgrading to Cloud Pak System 2.3.3.7 (Interim Fix 1) for general 2.3.x, or to Cloud Pak System 2....

7.5CVSS6.2AI score0.00914EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2023/08/08 4:59 p.m.37 views

CVE-2023-3894 DOS in jackson-dataformats-text

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

5.8CVSS7.5AI score0.00914EPSS
SaveExploits0References3
OSV
OSV
added 2023/08/08 4:59 p.m.20 views

CVE-2023-3894 DOS in jackson-dataformats-text

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

5.8CVSS7AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2023/08/08 4:59 p.m.8 views

CVE-2023-3894 DOS in jackson-dataformats-text

Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks DOS. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack...

5.8CVSS6.6AI score0.00914EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2023/08/08 10:40 a.m.44 views

Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform

Summary There are multiple vulnerabilities in open source libraries used by IBM MobileFirst Platform Foundation. They are addressed in this update. Vulnerability Details CVEID:CVE-2022-45688 DESCRIPTION: Hutool is vulnerable to a denial of service, caused by stack-based buffer overflow. By...

7.5CVSS7.1AI score0.01181EPSS
SaveExploits5Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/08 12:00 a.m.7 views

PT-2023-26697 · Unknown · Jackson-Dataformats-Text

Name of the Vulnerable Software and Affected Versions: jackson-dataformats-text affected versions not specified Description: The issue allows for Denial of Service attacks. If the parser is running on user-supplied input, an attacker may supply content that causes the parser to crash by stack...

7.5CVSS7.3AI score0.00914EPSS
SaveExploits0References14
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.10 views

FasterXML Jackson Buffer Error Vulnerability

FasterXML Jackson is a data manipulation tool for Java from FasterXML USA. A security vulnerability exists in FasterXML Jackson-dataformats-text, which stems from vulnerability to denial-of-service DOS attacks when parsing TOML data...

7.5CVSS6.7AI score0.00914EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2023/08/07 3:19 p.m.54 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

7.5CVSS6.6AI score0.02682EPSS
SaveExploits2References27
RedHat Linux
RedHat Linux
added 2023/08/07 3:19 p.m.14 views

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS6.8AI score0.01124EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/08/07 3:18 p.m.54 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

7.5CVSS6.6AI score0.02682EPSS
SaveExploits2References27
RedHat Linux
RedHat Linux
added 2023/08/07 3:18 p.m.12 views

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS6.8AI score0.01124EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/08/07 3:18 p.m.14 views

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

7.5CVSS6.8AI score0.01124EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2023/08/07 3:18 p.m.74 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.6AI score0.02682EPSS
SaveExploits2References27
RedHat Linux
RedHat Linux
added 2023/08/07 3:02 p.m.74 views

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.12 security update

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.5CVSS6.6AI score0.02682EPSS
SaveExploits2References26
Rows per page
Query Builder