Show filters
73 Total Results
Displaying 41-50 of 73
Sort by:
Attacker Value
Unknown

CVE-2020-36067

Disclosure Date: January 05, 2021 (last updated February 22, 2025)
GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.
Attacker Value
Unknown

CVE-2016-20002

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows comment access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20003

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20001

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20005

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows user registration bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20004

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows field access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20006

Disclosure Date: January 01, 2021 (last updated November 28, 2024)
The REST/JSON project 7.x-1.x for Drupal allows blockage of user logins, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20007

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows session name guessing, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2016-20008

Disclosure Date: January 01, 2021 (last updated February 22, 2025)
The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Attacker Value
Unknown

CVE-2020-29203

Disclosure Date: December 26, 2020 (last updated February 22, 2025)
struct2json before 2020-11-18 is affected by a Buffer Overflow because strcpy is used for S2J_STRUCT_GET_string_ELEMENT.