Lucene search
K

11 matches found

CNNVD
CNNVD
added 2026/05/08 12:0 a.m.3 views

Lightweight JSON text parser 安全漏洞

Lightweight JSON Text Parser is a lightweight JSON text parsing library developed by Tilen Majerle. Version 1.8.1 of Lightweight JSON Text Parser has a security vulnerability. This vulnerability stems from a logical error in the string termination detection mechanism of the streaming JSON parser,...

7.5CVSS5.8AI score0.00166EPSS
Exploits0References1
OSV
OSV
added 2026/03/08 5:12 p.m.2 views

MAL-2026-1287 Malicious code in simple-text-parser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 028015ffba2e58b87cbc6405ccb9358c194b81fafea44e7359587509510d4027 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

5.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/08 5:12 p.m.3 views

Malicious code in simple-text-parser (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 028015ffba2e58b87cbc6405ccb9358c194b81fafea44e7359587509510d4027 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

5.9AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2024/04/11 11:5 a.m.39 views

CVE-2024-21509

A prototype pollution vulnerability was found in mysql2. Insecure results in object creation and improper user input sanitization can lead to prototype poisoning. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Securit...

6.5CVSS6.2AI score0.00765EPSS
Exploits1References6
OSV
OSV
added 2024/04/10 3:30 p.m.0 views

GHSA-49J4-86M8-Q2JW mysql2 vulnerable to Prototype Poisoning

Versions of the package mysql2 before 3.9.4 are vulnerable to Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in textparser.js and binaryparser.js...

6.9CVSS5.9AI score0.00765EPSS
Exploits1References8
CVE
CVE
added 2024/04/10 5:0 a.m.282 views

CVE-2024-21509

The CVE-2024-21509 vulnerability affects the mysql2 package prior to version 3.9.4, as described across multiple sources. The root cause is Prototype Poisoning due to insecure results object creation and improper user input sanitization passed through parserFn in text_parser.js and binary_parser....

6.5CVSS6.3AI score0.00765EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2022/11/29 12:0 a.m.2 views

IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server Liberty is a Java application server built on top of the Open Liberty project from International Business Machines IBM. IBM WebSphere Application Server Liberty has a denial-of-service vulnerability that stems from a flaw in the parser of text-formatted data, whic...

7.5CVSS6.7AI score0.00125EPSS
Exploits0References14
CNVD
CNVD
added 2018/11/22 12:0 a.m.2 views

Unspecified vulnerability in Atlantis Word Processor rich text format parser

Atlantis Word Processor is a suite of word processor software from the Atlantis Word Processor team. rich text format parser is one of the rich text format editors. A security vulnerability exists in rich text format parser in Atlantis Word Processor versions 3.2.7.1 and 3.2.7.2. An attacker can...

8.8CVSS7.3AI score0.00243EPSS
Exploits1References1
CNVD
CNVD
added 2018/02/28 12:0 a.m.1 views

Memory corruption vulnerability exists in WPS Office 2016 text (CNVD-2018-04744)

WPS office is an office software suite independently developed by Kingsoft Corporation. A memory corruption vulnerability exists in WPS text wps.exe in WPS when parsing a specific doc file. An attacker can exploit the vulnerability to cause a denial of service or code execution...

7.6AI score
Exploits0
CNVD
CNVD
added 2017/09/21 12:0 a.m.1 views

Memory Corruption Vulnerability in WPS Text wpsmain Module

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in WPS text wps.exe in the wpsmain module when parsing a specific doc file, which can be exploited by an attacker to cause a denial of service...

6.9AI score
Exploits0
OSV
OSV
added 2016/01/04 5:59 a.m.0 views

UBUNTU-CVE-2015-8729

The ascendseek function in wiretap/ascendtext.c in the Ascend file parser in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not ensure the presence of a '\0' character at the end of a date string, which allows remote attackers to cause a denial of service out-of-bounds read and...

5.5CVSS6.4AI score0.00885EPSS
Exploits1References5
Rows per page
Query Builder