Lucene search
+L

145 matches found

OSV
OSV
•added 2023/12/13 9:15 p.m.•11 views

ALPINE-CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

5.5CVSS7.4AI score0.00439EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/13 9:15 p.m.•5 views

DEBIAN-CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

5.5CVSS6.2AI score0.00439EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/13 9:15 p.m.•45 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS0.00439EPSS
SaveExploits1References5
OSV
OSV
•added 2023/12/13 9:15 p.m.•6 views

DEBIAN-CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

5.5CVSS6.4AI score0.00508EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/13 9:15 p.m.•44 views

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS0.00508EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2023/12/13 9:15 p.m.•31 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.6AI score0.00439EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/12/13 9:15 p.m.•61 views

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.9AI score0.00508EPSS
SaveExploits1References4
Prion
Prion
•added 2023/12/13 9:15 p.m.•27 views

Stack overflow

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

1.7CVSS7.4AI score0.00439EPSS
SaveExploits1References5Affected Software1
CVE
CVE
•added 2023/12/13 8:49 p.m.•84 views

CVE-2023-50268

CVE-2023-50268 concerns jq, a command-line JSON processor. Multiple sources confirm: jq 1.7 is vulnerable to a stack-based buffer overflow in builds using decNumber; a patch is included in version 1.7.1. Practical impact is not elaborated beyond the buffer overflow description in the provided doc...

6.2CVSS6AI score0.00439EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2023/12/13 8:49 p.m.•75 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00439EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2023/12/13 8:49 p.m.•96 views

CVE-2023-50268

jq is a command-line JSON processor. Version 1.7 is vulnerable to stack-based buffer overflow in builds using decNumber. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00439EPSS
SaveExploits1
CVE
CVE
•added 2023/12/13 8:43 p.m.•108 views

CVE-2023-50246

CVE-2023-50246 affects jq (command-line JSON processor). The connected OSSV entry specifies a heap-based buffer overflow in the decToString function of decNumber.c affecting version 1.7, with a patch released in version 1.7.1. The description confirms the vulnerability class and the fix, but does...

6.2CVSS6AI score0.00508EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2023/12/13 8:43 p.m.•27 views

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.2AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2023/12/13 8:43 p.m.•55 views

CVE-2023-50246 jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.7AI score0.00508EPSS
SaveExploits1References4
AlpineLinux
AlpineLinux
•added 2023/12/13 8:43 p.m.•89 views

CVE-2023-50246

jq is a command-line JSON processor. Version 1.7 is vulnerable to heap-based buffer overflow. Version 1.7.1 contains a patch for this issue...

6.2CVSS6.1AI score0.00508EPSS
SaveExploits1
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•12 views

jq Security Vulnerabilities

jq is jqlang open source a lightweight and flexible command-line JSON processor . A security vulnerability exists in jq version 1.7 that stems from the use of decNumber builds vulnerable to stack-based buffer overflows...

6.2CVSS7AI score0.00439EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•17 views

jq Security Vulnerabilities

jq is jqlang open source a lightweight and flexible command line JSON processor . A security vulnerability exists in jq version 1.7, which stems from the function decToString in decNumber.c being susceptible to a heap-based buffer overflow...

6.2CVSS7.2AI score0.00508EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2023/12/11 12:00 a.m.•47 views

Atlassian Jira Service Management Data Center and Server 4.20.x < 4.20.27 / 5.4.x < 5.4.11 (JSDSERVER-14746)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-14746 advisory. - Json-smart is a performance focused, JSON processor lib. When reaching a or character in the JSON...

7.5CVSS6.6AI score0.01119EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/03/31 12:00 a.m.•67 views

Debian dla-3373 : libjson-smart-java - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3373 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3373-1 [email protected]...

7.5CVSS6.6AI score0.02281EPSS
SaveExploits2References6
NVD
NVD
•added 2023/03/22 6:15 a.m.•34 views

CVE-2023-1370

Json-smart is a performance focused, JSON processor lib. When reaching a ‘‘ or ‘‘ character in the JSON input, the code parses an array or an object respectively. It was discovered that the code does not have any limit to the nesting of such arrays or objects. Since the parsing of nested arrays a...

7.5CVSS8.5AI score0.01119EPSS
SaveExploits1References2
Rows per page
Query Builder