Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 8:44 a.m.5 views

CVE-2022-23496

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS6.6AI score0.00334EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-7593

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00334EPSS
Exploits0References4
Prion
Prion
added 2022/12/08 10:15 p.m.7 views

Design/Logic Flaw

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

5CVSS7.5AI score0.00334EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/12/08 9:19 p.m.9 views

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS7.5AI score0.00334EPSS
Exploits0References4
CVE
CVE
added 2022/12/08 9:19 p.m.99 views

CVE-2022-23496

Vulnerability summary (CVE-2022-23496, Yauaa) : The Java library Yauaa can crash when using the Client Hints analysis feature introduced with version 7.0.0 due to an ArrayIndexOutOfBoundsException. This affects applications that enable Client Hints analysis; those not using this feature are not a...

7.5CVSS7.4AI score0.00334EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/08 9:19 p.m.4 views

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS7.5AI score0.00334EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/12/08 9:19 p.m.14 views

CVE-2022-23496 A crafted list can trigger a ArrayIndexOutOfBoundsException in Yauaa

Yet Another UserAgent Analyzer Yauaa is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an...

7.5CVSS7.7AI score0.00334EPSS
Exploits0References2
OSV
OSV
added 2022/12/08 3:52 p.m.15 views

GHSA-C4PM-63CG-9J7H Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List

Impact Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. Applications that do not use this feature are not affected. Patches Upgrade to 7.9.0 Workarounds Catch and discard any exceptions from...

8.6CVSS7.4AI score0.00334EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2022/12/08 3:52 p.m.40 views

Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List

Impact Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. Applications that do not use this feature are not affected. Patches Upgrade to 7.9.0 Workarounds Catch and discard any exceptions from...

7.5CVSS2.2AI score0.00334EPSS
Exploits0References4Affected Software12
CNNVD
CNNVD
added 2022/12/08 12:0 a.m.1 views

Yauaa 安全漏洞

Yauaa is a java library from the personal developer Niels Basjes. It is used for UserAgent analysis. A security vulnerability exists in Yauaa, which stems from its introduction of a client-side hint analysis feature that causes applications to crash when the Yauaa library throws an...

7.5CVSS7.2AI score0.00334EPSS
Exploits0References3
Rows per page
Query Builder