Lucene search
K

4 matches found

OSV
OSV
added 2021/05/26 7:59 p.m.9 views

GHSA-RRQV-VJRW-HRCR Arbitrary Code Execution in json-ptr

There is a security vulnerability in json-ptr versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get method, your project is vulnerable to this injection-style vulnerability...

7.7AI score
Exploits0References8
Github Security Blog
Github Security Blog
added 2021/05/26 7:59 p.m.32 views

Arbitrary Code Execution in json-ptr

There is a security vulnerability in json-ptr versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get method, your project is vulnerable to this injection-style vulnerability...

4.7AI score
Exploits0References9Affected Software1
Node.js
Node.js
added 2021/05/10 7:17 p.m.44 views

Arbitrary JavaScript Execution

Overview There is a security vulnerability in json-ptr versions prior to v2.1.0 in which an unscrupulous actor may execute arbitrary code. If your code sends un-sanitized user input to json-ptr's .get method, your project is vulnerable to this injection-style vulnerability. Recommendation Upgrade...

7.5AI score
Exploits0Affected Software1
Cvelist
Cvelist
added 2005/11/05 11:0 a.m.16 views

CVE-2005-3505

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

5.7AI score0.01262EPSS
Exploits1References9
Rows per page
Query Builder