Lucene search
+L

16 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2026/08/26 12:00 a.m.•20 views

Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

Ajax.NET Professional AjaxPro contains a deserialization of untrusted data vulnerability that could allow for remote code execution via arbitrary .NET classes. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users are advised to discontinue use and/or transition to a...

9.8CVSS9.8AI score0.82578EPSS
SaveIn wildExploits3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2023-3164

Malicious code in bioql PyPI...

6.3CVSS5.7AI score0.00628EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/23 4:25 a.m.•21 views

CVE-2023-49289

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS6AI score0.00628EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/22 9:35 p.m.•20 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS6.2AI score0.00824EPSS
SaveExploits0
Veracode
Veracode
•added 2023/12/05 7:52 a.m.•21 views

Cross-Site Scripting(XSS)

Ajax.NET Professional is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the missing data validation in the parse function of core.js. This could allow an attacker to execute arbitrary Javascript...

6.3CVSS6.9AI score0.00628EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/12/05 12:15 a.m.•31 views

Cross site scripting

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

5.8CVSS6.2AI score0.00628EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/12/04 11:53 p.m.•22 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS5.2AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2023/12/04 11:53 p.m.•18 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS6AI score0.00628EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•1 views

CVE-2023-49289: Improper Neutralization of Input During Web Page Generation

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS5.5AI score0.00628EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/22 9:15 p.m.•29 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

5.4CVSS6.2AI score
SaveExploits0References3
NVD
NVD
•added 2021/12/22 9:15 p.m.•55 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS0.00824EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/12/22 9:15 p.m.•11 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS6.4AI score0.00824EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2021/12/22 8:55 p.m.•65 views

CVE-2021-43853 Cross-Site Scripting in AjaxNetProfessional

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS8.6AI score0.00824EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•3 views

CVE-2021-43853: Improper Neutralization of Input During Web Page Generation

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS5AI score0.00824EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/12/07 12:00 a.m.•121 views

Unspecified Vulnerability in Ajax.NET Professional

NET Professional is Ajax.NET Professional AjaxPro is one of the first AJAX frameworks available for Microsoft ASP.NET. NET Professional has a security vulnerability that originates from the possibility of deserializing arbitrary . An attacker could use this vulnerability to perform a...

9.8CVSS6.9AI score0.82578EPSS
SaveExploits3References1
CNNVD
CNNVD
•added 2021/12/03 12:00 a.m.•19 views

Ajax.NET Professional 代码问题漏洞

NET Professional is Ajax.NET Professional AjaxPro is one of the first AJAX frameworks available for Microsoft ASP.NET. NET Professional has a security vulnerability that originates from the possibility of deserializing arbitrary . An attacker could use this vulnerability to perform a...

9.8CVSS6.1AI score0.82578EPSS
SaveExploits3References3
Rows per page
Query Builder