Lucene search
K

9 matches found

OSV
OSV
added 2026/05/20 10:10 a.m.7 views

RHSA-2026:19151 Red Hat Security Advisory: jq security update

Bulletin has no description...

8.2CVSS5.7AI score0.00314EPSS
Exploits1References15
OSV
OSV
added 2026/05/19 10:6 a.m.6 views

RHSA-2026:18047 Red Hat Security Advisory: jq security update

Bulletin has no description...

8.2CVSS5.7AI score0.00314EPSS
Exploits1References15
OSV
OSV
added 2026/05/19 10:6 a.m.5 views

RHSA-2026:18046 Red Hat Security Advisory: jq security update

Bulletin has no description...

8.2CVSS5.7AI score0.00314EPSS
Exploits1References15
OSV
OSV
added 2026/05/19 10:6 a.m.5 views

RHSA-2026:18042 Red Hat Security Advisory: jq security update

Bulletin has no description...

8.2CVSS5.7AI score0.00314EPSS
Exploits1References15
RedHat Linux
RedHat Linux
added 2026/05/18 12:28 p.m.16 views

jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers

A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the jvparsesized function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the erro...

6.9CVSS5.8AI score0.00314EPSS
Exploits1References6
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-39979

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jvparsesized API in libjq accepts a counted buffer with an...

6.9CVSS5.9AI score0.00314EPSS
Exploits1References2
NVD
NVD
added 2026/04/13 11:16 p.m.4 views

CVE-2026-39979

jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jvparsesized API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jvstringfmt, which reads until a NUL terminat...

6.9CVSS0.00314EPSS
Exploits1References2
OSV
OSV
added 2023/12/11 7:15 a.m.3 views

UBUNTU-CVE-2023-49355

decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the " -1.2e-1111111111" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation...

7.5CVSS5.8AI score0.0117EPSS
Exploits1References5
Kitploit
Kitploit
added 2019/06/30 1:38 p.m.33 views

Spyse.Py - Python API Wrapper And Command-Line Client For The Tools Hosted On Spyse.Com

Python API wrapper and command-line client for the tools hosted on spyse.com. "Spyse is a developer of complete DAAS Data-As-A-Service solutions for Internet security professionals, corporate and remote system administrators, SSL / TLS encryption certificate providers, data centers and business...

7.4AI score
Exploits0References1
Rows per page
Query Builder