Lucene search
+L

32 matches found

Vulnrichment
Vulnrichment
•added 2022/12/08 12:00 a.m.•24 views

CVE-2022-4348 y_project RuoYi-Cloud JSON cross site scripting

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

3.5CVSS4.1AI score0.00409EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/08 12:00 a.m.•16 views

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer RuoYi in China. A security vulnerability exists in RuoYi, which stems from some unknown functions in its JSON Handler component that allow an attacker to implement cross-site scripting. The attack method has been made public and can...

6.1CVSS5.2AI score0.00409EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/08 12:00 a.m.•1 views

CVE-2022-4348: Improper Neutralization

A vulnerability was found in yproject RuoYi-Cloud. It has been rated as problematic. Affected by this issue is some unknown functionality of the component JSON Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the publi...

6.1CVSS3.8AI score0.00409EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2020/09/22 12:00 a.m.•14 views

The vulnerability of the JSON Handler component in the Visual Studio Code editor, a tool for software development by Microsoft Visual Studio, arises from insufficient input data validation. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the JSON Handler component in the Visual Studio Code editor, a tool for software development by Microsoft Visual Studio, is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary code i...

9.3CVSS7.7AI score0.05365EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2019/03/12 6:29 p.m.•23 views

CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

6.1CVSS6.5AI score0.00754EPSS
SaveExploits0References2
OSV
OSV
•added 2019/03/12 6:29 p.m.•15 views

CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

6.1CVSS6.8AI score
SaveExploits0References2
Prion
Prion
•added 2019/03/12 6:29 p.m.•21 views

Input validation

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

4.3CVSS6.2AI score0.00754EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2019/03/12 6:00 p.m.•27 views

CVE-2019-9712

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

6.7AI score0.00754EPSS
SaveExploits0References2
CVE
CVE
•added 2019/03/12 6:00 p.m.•146 views

CVE-2019-9712

CVE-2019-9712 concerns Joomla! core prior to version 3.9.4, where the JSON handler in component com_config lacks input validation, enabling cross-site scripting (XSS). The issue is documented across multiple sources (NVD entry, CNVD, OSV, and vendor advisories). Implication: an attacker could cra...

6.1CVSS6.3AI score0.00754EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/12 12:00 a.m.•4 views

CVE-2019-9712: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Joomla! before 3.9.4. The JSON handler in comconfig lacks input validation, leading to XSS...

6.1CVSS5.7AI score0.00754EPSS
SaveExploits0References2
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
•added 2019/03/04 12:00 a.m.•48 views

[20190301] - Core - XSS in com_config JSON handler

The JSON handler in comconfig lacks input validation, leading to XSS vulnerability...

6.1CVSS1.5AI score0.00754EPSS
SaveExploits0Affected Software1
Vaadin
Vaadin
•added 2017/05/11 12:00 a.m.•51 views

Denial of service in UIDL request handler in Vaadin 7 and 8

Improper check for exceptional condition in a third party JSON handling library used in com.vaadin:vaadin-shared versions 7.4.0 through 7.7.8 Vaadin 7.4.0 through 7.7.8, and 8.0.0 through 8.0.5 Vaadin 8.0.0 through 8.0.5 allows attacker to perform denial of service DoS attack via crafted JSON...

1.4AI score
SaveExploits0References5Affected Software2
Rows per page
Query Builder