Lucene search
+L

5668 matches found

osv_oesa
osv_oesa
•added 2024/10/12 11:07 a.m.•22 views

OESA-2024-2228 json-lib security update

JSON-lib is a java library for transforming beans, maps, collections, java arrays and XML to JSON and back again to beans and DynaBeans. Security Fixes: util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.CVE-2024-47855...

4CVSS7AI score0.17565EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/10/09 12:00 a.m.•32 views

openSUSE 15 Security Update : json-lib (SUSE-SU-2024:3543-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3543-1 advisory. - CVE-2024-47855: Fixed mishandled unbalanced comment string bsc1231295 Tenable has extracted the preceding description block directly from the SUSE security...

5.3CVSS5.4AI score0.17565EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2024/10/08 1:33 p.m.•21 views

Security update for json-lib

This update for json-lib fixes the following issues: CVE-2024-47855: Fixed mishandled unbalanced comment string bsc1231295 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command...

5.1CVSS6.7AI score0.17565EPSS
SaveExploits0References4
osv_suse
osv_suse
•added 2024/10/08 1:33 p.m.•24 views

SUSE-SU-2024:3543-1 Security update for json-lib

This update for json-lib fixes the following issues: - CVE-2024-47855: Fixed mishandled unbalanced comment string bsc1231295...

5.3CVSS5.5AI score0.17565EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2024/10/07 6:31 p.m.•32 views

LimeSurvey Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields...

6.1CVSS7.2AI score0.00567EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•3 views

CVE-2024-28709: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields...

6.1CVSS6.6AI score0.00567EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•23 views

LimeSurvey 安全漏洞

LimeSurvey PHPSurveyor is an open source online survey program from the LimeSurvey team, which supports survey program development, survey distribution, and data collection. A security vulnerability exists in LimeSurvey prior to 6.5.12+240611 that stems from the presence of a cross-site scripting...

6.1CVSS6.5AI score0.00567EPSS
SaveExploits0References3
Mend
Mend
•added 2024/10/07 12:00 a.m.•6 views

CVE-2024-28709

Cross Site Scripting vulnerability in LimeSurvey before 6.5.12+240611 allows a remote attacker to execute arbitrary code via a crafted script to the title and comment fields...

6.1CVSS0.00567EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2024/10/05 2:50 a.m.•16 views

SUSE CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

4CVSS7AI score0.17565EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2024/10/04 6:30 a.m.•36 views

JSON-lib mishandles an unbalanced comment string

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

5.3CVSS6.9AI score0.17565EPSS
SaveExploits0References6Affected Software2
osv_ghsa
osv_ghsa
•added 2024/10/04 6:30 a.m.•47 views

GHSA-WWCP-26WC-3FXM JSON-lib mishandles an unbalanced comment string

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

6.9CVSS5.4AI score0.17565EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2024/10/04 6:15 a.m.•14 views

DEBIAN-CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

5.3CVSS5.2AI score0.17565EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/10/04 6:15 a.m.•26 views

UBUNTU-CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

5.3CVSS5.8AI score0.17565EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/04 12:00 a.m.•6 views

CVE-2024-47855: Undefined Security Weakness

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

5.3CVSS6AI score0.17565EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/04 12:00 a.m.•365 views

CVE-2024-47855

The Java library JSON-lib is vulnerable due to improper syntax validation in util/JSONTokener.java before version 3.1.0 . The component mishandles an unbalanced comment string, which can be exploited remotely to trigger service failures or a Denial of Service (DoS) condition. This issue affects v...

5.3CVSS6AI score0.17565EPSS
SaveExploits0References2
Mend
Mend
•added 2024/10/04 12:00 a.m.•8 views

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

6.9CVSS0.17565EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/10/04 12:00 a.m.•24 views

JSON-lib 安全漏洞

Json-lib is a java library open-sourced by Kordamp. It is used to convert beans, maps, collections, java arrays and XML to JSON and back to beans and DynaBeans. A security vulnerability exists in JSON-lib versions prior to 3.1.0, which stems from util/JSONTokener.java incorrectly handling...

5.3CVSS6.8AI score0.17565EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/10/04 12:00 a.m.•38 views

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

5.3CVSS7.1AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2024/10/04 12:00 a.m.•53 views

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

0.17565EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/09/25 3:15 a.m.•18 views

CVE-2024-8481

The The Special Text Boxes plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.2.2. This is due to the plugin adding the filter addfilter'commenttext', 'doshortcode'; which will run all shortcodes in comments. This makes it possible for...

7.3CVSS6.1AI score0.00649EPSS
SaveExploits0References2
Rows per page
Query Builder