All CVEs — page 729 of 854
The complete archive, 25 per page, newest first. 21350 records. Search instead.
Jawn's AsyncParser performs quadratic CPU work when parsing JSON tokens delivered in many small chunks, allowing remote attackers to cause denial of service through excessive CPU consumption.
Wire's Swift runtime allows negative length values in LENGTH_DELIMITED fields within unknown START_GROUP fields, causing process crashes when reading untrusted protobuf data. This vulnerability enables remote crash-only attacks without authentication or user interaction.
Jawn JSON parser allows unlimited nesting depth which can lead to JVM heap exhaustion and denial of service when processing untrusted JSON input. This vulnerability affects applications using Jawn versions prior to 1.7.0.
This vulnerability allows unauthorized access to the XML Web Publishing interface by bypassing the Custom Web Publishing with XML setting through an extended privilege header, posing a significant security risk.
This vulnerability allows an attacker to read process memory during thumbnail generation in FileMaker WebDirect by uploading a specially crafted image file to a container field. This can lead to sensitive information disclosure.
A heap buffer overflow vulnerability in FileMaker Server allows for arbitrary code execution via a maliciously crafted .fmp12 database file, posing a significant risk.