Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Dan Pascu Subscribe
Filtered by product Python-cjson
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-1666 1 Dan Pascu 1 Python-cjson 2010-07-26 6.8 MEDIUM N/A
Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
CVE-2009-4924 1 Dan Pascu 1 Python-cjson 2010-07-05 4.3 MEDIUM N/A
Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.