Lucene search
K

16 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-3164

Malicious code in bioql PyPI...

6.3CVSS5.7AI score0.00347EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/05/23 4:25 a.m.7 views

CVE-2023-49289

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS6AI score0.00347EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/22 9:35 p.m.6 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS6.2AI score0.00239EPSS
Exploits0
Veracode
Veracode
added 2023/12/05 7:52 a.m.13 views

Cross-Site Scripting(XSS)

Ajax.NET Professional is vulnerable to Cross Site Scripting XSS. The vulnerability is due to the missing data validation in the parse function of core.js. This could allow an attacker to execute arbitrary Javascript...

6.3CVSS6.9AI score0.00347EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2023/12/05 12:15 a.m.18 views

Cross site scripting

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

5.8CVSS6.2AI score0.00347EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/12/04 11:53 p.m.12 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS5.2AI score0.00347EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/12/04 11:53 p.m.12 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS6.3AI score0.00347EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/12/04 11:53 p.m.13 views

CVE-2023-49289 Cross-site Scripting in Ajax.NET Professional

Ajax.NET Professional AjaxPro is an AJAX framework for Microsoft ASP.NET which will create proxy JavaScript classes that are used on client-side to invoke methods on the web server. Affected versions of this package are vulnerable cross site scripting attacks. Releases before version 21.12.22.1 a...

6.3CVSS6AI score0.00347EPSS
Exploits0References3
CVE
CVE
added 2023/12/04 11:53 p.m.46 views

CVE-2023-49289

CVE-2023-49289 affects Ajax.NET Professional (AjaxPro) for Microsoft ASP.NET. Affected versions before 21.12.22.1 are vulnerable to Cross-Site Scripting (XSS) through the proxy JavaScript generation mechanism. The vulnerability entails missing input validation/encoding in client-server interactio...

6.3CVSS5.7AI score0.00347EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2021/12/22 9:15 p.m.12 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

5.4CVSS6.2AI score
Exploits0References3
NVD
NVD
added 2021/12/22 9:15 p.m.9 views

CVE-2021-43853

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS0.00239EPSS
Exploits0References3
Prion
Prion
added 2021/12/22 9:15 p.m.10 views

Cross site scripting

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

3.5CVSS5.3AI score0.00239EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2021/12/22 8:55 p.m.12 views

CVE-2021-43853 Cross-Site Scripting in AjaxNetProfessional

Ajax.NET Professional AjaxPro is an AJAX framework available for Microsoft ASP.NET. Affected versions of this package are vulnerable to JavaScript object injection which may result in cross site scripting when leveraged by a malicious user. The affected core relates to JavaScript object creation...

8.7CVSS8.6AI score0.00239EPSS
Exploits0References3
CVE
CVE
added 2021/12/22 8:55 p.m.88 views

CVE-2021-43853

Ajax.NET Professional (AjaxPro) for Microsoft ASP.NET is affected by CVE-2021-43853 due to a JavaScript object injection vulnerability that arises during JSON input parsing, enabling cross-site scripting if a malicious actor supplies crafted data. All releases before 21.12.22.1 are affected. A re...

8.7CVSS5.7AI score0.00239EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2021/12/07 12:0 a.m.7 views

Unspecified Vulnerability in Ajax.NET Professional

NET Professional is Ajax.NET Professional AjaxPro is one of the first AJAX frameworks available for Microsoft ASP.NET. NET Professional has a security vulnerability that originates from the possibility of deserializing arbitrary . An attacker could use this vulnerability to perform a...

9.8CVSS6.9AI score0.87776EPSS
Exploits2References1
CNNVD
CNNVD
added 2021/12/03 12:0 a.m.5 views

Ajax.NET Professional 代码问题漏洞

NET Professional is Ajax.NET Professional AjaxPro is one of the first AJAX frameworks available for Microsoft ASP.NET. NET Professional has a security vulnerability that originates from the possibility of deserializing arbitrary . An attacker could use this vulnerability to perform a...

9.8CVSS6.1AI score0.87776EPSS
Exploits2References3
Rows per page
Query Builder