Lucene search
K

2418 matches found

OpenVAS
OpenVAS
added 2022/03/14 12:0 a.m.29 views

WordPress Multiple Vulnerabilities (Mar 2022) - Windows

WordPress is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.8AI score0.07286EPSS
Exploits2References3
Check Point Advisories
Check Point Advisories
added 2022/03/14 12:0 a.m.14 views

jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)

A cross site scripting vulnerability exists in the jQuery UI Datepicker widget. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

4.3CVSS4.6AI score0.22267EPSS
Exploits2
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/12 1:53 a.m.55 views

Security Bulletin: Vulnerabilities in Polkit, PostgreSQL, OpenSSL, OpenSSH, and jQuery affect IBM Spectrum Copy Data Management

Summary Vulnerabilities in Polkit, PostgreSQL, OpenSSL, OpenSSH, and jQuery can affect IBM Spectrum Copy Data Management. Vulnerabilities include elevated privileges, SQL injection, obtaining sensitive information, cross-site scripting, and man-in-the-middle attacks. Vulnerability Details CVEID:...

8.1CVSS8AI score0.88057EPSS
Exploits155Affected Software1
WPVulnDB
WPVulnDB
added 2022/03/11 12:0 a.m.92 views

WordPress < 5.9.2 - Prototype Pollution in jQuery

Description The jQuery library used in WordPress is affected by a Prototype Pollution issue...

7.1AI score
Exploits0References1
FreeBSD
FreeBSD
added 2022/03/11 12:0 a.m.7 views

wordpress -- multiple issues

wordpress developers reports: This security and maintenance release features 1 bug fix in addition to 3 security fixes. Because this is a security release, it is recommended that you update your sites immediately. All versions since WordPress 3.7 have also been updated. The security team would li...

2.3AI score
Exploits0References1
Atlassian
Atlassian
added 2022/03/07 8:15 a.m.50 views

CVE-2021-43956: Javascript Prototype Pollution in the jQuery deserialize library

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability. Affected versions: version 4.8.9 Fixed versions: 4.8.9...

6.1CVSS6.1AI score0.00368EPSS
Exploits0
Atlassian
Atlassian
added 2022/03/07 8:15 a.m.48 views

CVE-2021-43956: Javascript Prototype Pollution in the jQuery deserialize library

The jQuery deserialize library in Fisheye and Crucible before version 4.8.9 allowed remote attackers to to inject arbitrary HTML and/or JavaScript via a prototype pollution vulnerability. Affected versions: version 4.8.9 Fixed versions: 4.8.9...

6.1CVSS6.1AI score0.00368EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/03 5:6 p.m.62 views

Security Bulletin: IBM Security QRadar SOAR is using a component vulnerable to Cross Site Scripting (CVE-2021-41182, CVE-2021-41183, CVE-2021-41184)

Summary IBM® Security QRadar SOAR formerly known as Resilient SOAR is using a component with known Cross Site Scripting vulnerabilities. QRadar SOAR uses jQuery-UI, which is vulnerable to several XSS issues as listed below. QRadar SOAR has released an update that addresses these issues...

6.5CVSS0.3AI score0.31104EPSS
Exploits4
OSV
OSV
added 2022/03/03 12:0 a.m.150 views

GHSA-GCX5-3P5F-F8VP Prototype Pollution in jquery.cookie

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6AI score0.00295EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/03/03 12:0 a.m.37 views

Prototype Pollution in jquery.cookie

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS2AI score0.00295EPSS
Exploits1References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/02 12:15 p.m.2 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6.7AI score0.00295EPSS
Exploits1References3
OSV
OSV
added 2022/03/02 12:15 p.m.1 views

DEBIAN-CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6.6AI score0.00295EPSS
Exploits1References1
NVD
NVD
added 2022/03/02 12:15 p.m.13 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS0.00295EPSS
Exploits1References2
OSV
OSV
added 2022/03/02 12:15 p.m.24 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6AI score
Exploits0References2
Prion
Prion
added 2022/03/02 12:15 p.m.14 views

Cross site scripting

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

4.3CVSS6.1AI score0.00295EPSS
Exploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/03/02 12:15 p.m.30 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6.8AI score0.00295EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2022/03/02 11:16 a.m.36 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.1CVSS6.7AI score0.00295EPSS
Exploits1
Cvelist
Cvelist
added 2022/03/02 11:16 a.m.18 views

CVE-2022-23395

jQuery Cookie 1.4.1 is affected by prototype pollution, which can lead to DOM cross-site scripting XSS...

6.4AI score0.00295EPSS
Exploits1References2
CVE
CVE
added 2022/03/02 11:16 a.m.181 views

CVE-2022-23395

CVE-2022-23395 affects jQuery Cookie 1.4.1 and is caused by prototype pollution, enabling potential DOM-based XSS. Connected docs confirm exposure in multiple products (e.g., Oracle Siebel with component jquery-cookie; IBM ILMT advisory) and describe exploitation requiring network access in some ...

6.1CVSS6AI score0.00295EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2022/03/02 12:0 a.m.1 views

jQuery 代码问题漏洞

jQuery is the United States John Resig individual developers of a set of open source , cross-browser JavaScript library . The library simplifies operations between HTML and JavaScript and features modularity, plug-in extensions, and more. A code issue vulnerability exists in Jquery Cookie, which...

6.1CVSS7.3AI score0.00295EPSS
Exploits1References6
Rows per page
Query Builder