CVE Vulnerability Catalog

An issue was discovered in the pbjson library through version 0.4.0 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in JSONUtil thru version 5.0 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in jmarsden/jsonij through version 0.5.2 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in sojo through version 1.1.1 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in ph-json through version 9.5.5 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in mjson through version 1.4.1 that allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

An issue was discovered in json-io through version 4.14.0 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

An issue was discovered in flexjson through version 3.3 that allows attackers to cause a denial of service or other unspecified impacts via crafted objects that use cyclic dependencies.

The Checkmarx Plugin for Jenkins version 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

In Jenkins versions 2.399 and earlier, and LTS 2.387.3 and earlier, POST requests are sent to load the list of context actions. If part of the URL includes insufficiently escaped user-provided values, a victim may be tricked into sending a POST request to an unexpected endpoint by opening a context menu.

Unchecked reads in the NTP server in versions prior to commit 783490b allow a remote attacker to trigger a panic by sending an NTSAuthenticator packet with extension length longer than the packet contents.

A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data. This may lead to remote code execution when an attacker gets the user to open a malicious file.

The WooCommerce Stripe Payment Gateway plugin versions <= 7.4.0 has an IDOR vulnerability that allows unauthorized access to users' personal data.

A vulnerability in Apache Traffic Server allows unauthorized exposure of sensitive information. This affects versions from 8.0.0 through 9.2.0.

Missing Authorization in GitHub repository fossbilling/fossbilling prior to version 0.5.0.

A vulnerability in Microsoft Office allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through malicious documents or links.

A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw through malicious Excel files.

.NET and Visual Studio contain an elevation of privilege vulnerability that could allow an attacker to gain higher privileges on the system.

A vulnerability in Microsoft Excel allows for remote code execution, potentially leading to unauthorized access to the user's system. An attacker can exploit this flaw through malicious Excel files.

A vulnerability in Microsoft Outlook allows for remote code execution, potentially leading to full control over the user's system. An attacker can exploit this flaw through specially crafted email messages.