cjson vulnerabilities (Red Hat)
50 vulnerabilities.
-
cjsonRed Hat Out-of-bounds read & write in RFC 3211 KEK Unwrap 9.8 Critical -
cjsonRed Hat cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer... 9.8 Critical -
cjsonRed Hat Unbounded-Parameter DoS in Rack::QueryParser 7.5 High -
cjsonRed Hat Django is subject to SQL injection through its column aliases 7.1 High -
cjsonRed Hat Foreman: read-only access to entire db from templates 6.3 Medium -
cjsonRed Hat Rexml: rexml: denial of service via inefficient regex parsing 7.5 High -
cjsonRed Hat REXML ReDoS vulnerability 6.6 Medium -
cjsonRed Hat Memory leak 7.2 High -
cjsonRed Hat Puppet-pulpcore: an authentication bypass vulnerability exists in pulpcore 9.8 Critical -
cjsonRed Hat Puppet-foreman: an authentication bypass vulnerability exists in foreman 9.8 Critical -
cjsonRed Hat Django SQL injection vulnerability 7.3 High -
cjsonRed Hat HPACK table poisoning in gRPC C++, Python & Ruby 6.3 Medium -
cjsonRed Hat Django vulnerable to Denial of Service 7.5 High -
cjsonRed Hat Django Path Traversal vulnerability 4.3 Medium -
cjsonRed Hat Django vulnerable to user enumeration attack 5.3 Medium -
cjsonRed Hat Django vulnerable to Denial of Service 7.5 High -
cjsonRed Hat Denial of Service via crafted zip file in jaraco/zipp 6.2 Medium -
cjsonRed Hat Proxy-Authorization request header isn't stripped during cross-origin redirects in urllib3 4.4 Medium -
cjsonRed Hat Regular Expression Denial of Service in micromatch 5.3 Medium -
cjsonRed Hat cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the... 7.6 High -
cjsonRed Hat Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError. 7.5 High -
cjsonRed Hat node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation 6.5 Medium -
cjsonRed Hat cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
cjsonRed Hat cJSON v1.7.16 was discovered to contain a segmentation violation via the function... 7.5 High -
cjsonRed Hat jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 7.5 High -
cjsonRed Hat Resource exhaustion in Django 7.5 High -
cjsonRed Hat Django contains Uncontrolled Resource Consumption via cached header 7.5 High -
cjsonRed Hat rails-html-sanitizer contains an incomplete fix for an XSS vulnerability 6.1 Medium -
cjsonRed Hat Possible XSS vulnerability with certain configurations of rails-html-sanitizer 7.2 High -
cjsonRed Hat Improper neutralization of data URIs allows XSS in rails-html-sanitizer 6.1 Medium -
cjsonRed Hat Inefficient Regular Expression Complexity in rails-html-sanitizer 7.5 High -
cjsonRed Hat Uncontrolled Recursion in Loofah 7.5 High -
cjsonRed Hat Improper neutralization of data URIs may allow XSS in Loofah 6.1 Medium -
cjsonRed Hat Inefficient Regular Expression Complexity in Loofah 7.5 High -
cjsonRed Hat Remote Code execution in SnakeYAML 8.3 High -
cjsonRed Hat TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
cjsonRed Hat Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults 9.8 Critical -
cjsonRed Hat Django denial-of-service vulnerability in internationalized URLs 7.5 High -
cjsonRed Hat Uncontrolled Resource Consumption in FasterXML jackson-databind 7.5 High -
cjsonRed Hat Uncontrolled Resource Consumption in Jackson-databind 7.5 High -
cjsonRed Hat DoS in SnakeYAML 6.5 Medium -
cjsonRed Hat DoS in SnakeYAML 6.5 Medium -
cjsonRed Hat DoS in SnakeYAML 6.5 Medium -
cjsonRed Hat DoS in SnakeYAML 6.5 Medium -
cjsonRed Hat Denial of Service (DoS) 7.5 High -
cjsonRed Hat TZInfo relative path traversal vulnerability allows loading of arbitrary files 7.5 High -
cjsonRed Hat Active Record RCE bug with Serialized Columns 9.8 Critical -
cjsonRed Hat Apache Commons Configuration insecure interpolation defaults 9.8 Critical -
cjsonRed Hat XSS Vulnerability in Action View tag helpers 6.1 Medium -
cjsonRed Hat Cross-site Scripting Vulnerability in Action Pack 6.1 Medium