653 matches found
Insecure serialization leading to RCE in serialize-javascript
serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js". An object such as "foo": /1"/, "bar": "a"@R--0@" was serialized as "foo": /1"/, "bar": "a/1"/, which allows an attacker to escape the bar key. This requires...
@adobe/helix-testutils (>=0.3.2, <=0.4.0), @agreed/ui (>=5.0.4, <=5.1.6) +56 more potentially affected by CVE-2020-7660 via serialize-javascript (3.0.0)
serialize-javascript NPM version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on serialize-javascript and may be impacted: - @adobe/helix-testutils =0.3.2, =5.0.4, =0.1.3-alpha.0, =0.1.19-alpha.0, =0.1.11-alpha.0, =0.1.3-alpha.0,...
npm-serialize-javascript: allows remote attackers to inject arbitrary code via the function deleteFunctions within index.js
A flaw was found in the serialize-javascript before version 3.1.0. This flaw allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js."...
npm-serialize-javascript: XSS via unsafe characters in serialized regular expressions
A XSS flaw was found in npm-serialize-javascript. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString backslash-escapes all forward slashes ...
OSV-2020-704 Heap-buffer-overflow in BEInt<unsigned char, 1>::set
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13736 Crash type: Heap-buffer-overflow WRITE 1 Crash state: BEInt::set CFF::CFFIndex ::setoffsetat bool CFF::FDArray ::serializeCFF::cff2fontdict...
OSV-2020-580 Heap-buffer-overflow in ots::OpenTypeSTAT::Serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12840 Crash type: Heap-buffer-overflow READ 2 Crash state: ots::OpenTypeSTAT::Serialize ProcessGeneric ProcessTTF...
OSV-2020-388 Stack-use-after-return in bool OT::Coverage::serialize<hb_map_iter_t<hb_map_iter_t<hb_filter_iter_t<OT::Co
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=14786 Crash type: Stack-use-after-return READ 4 Crash state: bool OT::Coverage::serializehbmapiterthbmapiterthbfilteritertOT::Co bool OT::SingleSubstFormat1::serializehbmapiterthbmapiterthbfilterite bool...
PT-2020-22366
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves a complex data structure, including hb hashmap t and hb...
PT-2020-22410
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. It occurs in the ots::OpenTypeSTAT::Serialize function, specifically during the processing of TT...
RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-grafana (RHSA-2020:2796)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2796 advisory. Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise...
FreeBSD : MongoDB -- Ensure RoleGraph can serialize authentication restrictions to BSON (d0be8e1f-b19a-11ea-94aa-b827eb2f57d4)
reports : Improper serialization of MongoDB Server's internal authorization state permits a user with valid credentials to bypass IP source address protection mechanisms following administrative action. Credit Discovered by Tony Yesudas. C Tenable Network Security, Inc. The descriptive text and...
OSV-2020-243 Heap-buffer-overflow in OT::VarRegionList::serialize
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19956 Crash type: Heap-buffer-overflow READ 12 Crash state: OT::VarRegionList::serialize OT::VariationStore::serialize bool OT::HVARVVAR::subset...
PT-2020-22204
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 12 crash has been reported. The crash involves the OT::VarRegionList::serialize, OT::VariationStore::serialize, and bool...
PT-2020-22386
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a problem in the hb serialize context t::embed function, specifically when...
CVE-2019-16769
A XSS flaw was found in npm-serialize-javascript. It does not properly mitigate against unsafe characters in serialized regular expressions. This vulnerability is not affected on Node.js environment since Node.js's implementation of RegExp.prototype.toString backslash-escapes all forward slashes ...
CVE-2020-7660
A flaw was found in the serialize-javascript before version 3.1.0. This flaw allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js."...
Remote Code Execution (RCE)
serialize-javascript is vulnerable to remote code execution RCE. The attack exists because the deleteFunctions within index.js does not sanitize the objects foo and bar and generates the value of internal UID using Math.random function with insufficient entropy, allowing an attacker to brute forc...
serialize-javascript code issue vulnerability
Verizon serialize-javascript is a package from Verizon that supports serializing JavaScript to JSON supersets. A code issue vulnerability exists in serialize-javascript versions prior to 3.1.0. A remote attacker can use the 'deleteFunctions' function in the index.js file to inject arbitrary code...
