Skip to main content
CVE-2020-1892 Mar 03, 15:15 HIGH PATCH This Week

Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0,. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Facebook Hhvm
NVD GitHub
CVSS 3.1
8.1
EPSS
1.1%
CVE-2020-5403 Mar 03, 19:15 HIGH PATCH This Week

Reactor Netty HttpServer, versions 0.9.3 and 0.9.4, is exposed to a URISyntaxException that causes the connection to be closed prematurely instead of producing a 400 response. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Reactor Netty Pivotal
NVD VulDB
CVSS 3.1
7.5
EPSS
1.1%
CVE-2020-1893 Mar 03, 15:15 HIGH PATCH This Week

Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Facebook Hhvm
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2020-1888 Mar 03, 15:15 HIGH PATCH This Week

Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Facebook Hhvm
NVD GitHub
CVSS 3.1
7.5
EPSS
1.1%
CVE-2020-1734 Mar 03, 22:15 HIGH PATCH This Week

A flaw was found in the pipe lookup plugin of ansible. Rated high severity (CVSS 7.4). No vendor patch available.

Command Injection Red Hat Ansible Engine Ansible Tower
NVD GitHub
CVSS 3.1
7.4
EPSS
0.4%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy