CVE-2021-43306

An exponential ReDoS Regular Expression Denial of Service can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method...

jquery-ui: XSS in the 'of' option of the .position() util

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the of option of the .position util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the of option is now treated as a CSS...

jquery-ui: XSS in *Text options of the datepicker widget

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various Text options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various Text options are now alway...

[R3] Nessus Version 10.2.0 Fixes Multiple Vulnerabilities

R3 Nessus Version 10.2.0 Fixes Multiple Vulnerabilities Arnie Cabral Thu, 05/26/2022 - 09:30 Nessus leverages third-party software to help provide underlying functionality. Several of the third-party components zlib, expat, jQuery UI were found to contain vulnerabilities, and updated versions hav...

com.github.wicket-acc:wicket-autowire (1.0.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (>=2.0.0, <=2.0.1) +279 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.21.0)

org.apache.wicket:wicket-core MAVEN version 6.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.wicket-acc:wicket-autowire 1.0.0 - com.googlecode.wicked-charts:wicked-charts-wicket6...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.26.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.26.0) +249 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.26.0)

org.apache.wicket:wicket-core MAVEN version 6.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.26.0 -...

com.cooldatasoft:wicket-menu (>=6.18.0.0, <=6.18.0.4), com.cooldatasoft:wicket-menu-demo (>=6.18.0.0, <=6.18.0.4) +310 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.18.0)

org.apache.wicket:wicket-core MAVEN version 6.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.18.0.0, =6.18.0.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.22.1, <=6.22.2), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.22.1, <=6.22.2) +275 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.22.0)

org.apache.wicket:wicket-core MAVEN version 6.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.22.1, =6.22.1, =6.22.1, =6.22.1, =6.22.1, =6.22....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.25.0, <=6.25.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.25.0, <=6.25.1) +287 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.25.0)

org.apache.wicket:wicket-core MAVEN version 6.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25....

at.molindo:molindo-wicket-utils (3.0.0), com.cooldatasoft:wicket-menu (>=6.14.0.0, <=6.14.0.4) +233 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.14.0)

org.apache.wicket:wicket-core MAVEN version 6.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 3.0.0 - com.cooldatasoft:wicket-menu =6.14.0.0, =6.14.0.0, =6.14.0,...

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...

com.googlecode.wicket-jquery-ui:jquery-ui-core (1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-kendo (1.2.0) +18 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.6)

org.apache.wicket:wicket-core MAVEN version 1.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:jquery-ui-core 1.2.0 - com.googlecode.wicket-jquery-ui:jquery-ui-kend...

at.molindo:molindo-wicket-utils (2.0.0-alpha-1), com.googlecode.wicked-charts:wicked-charts-wicket15 (1.5.0) +49 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.10)

org.apache.wicket:wicket-core MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0-alpha-1 - com.googlecode.wicked-charts:wicked-charts-wicket15...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.27.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.27.0) +68 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.27.0)

org.apache.wicket:wicket-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.27.0 -...

com.cooldatasoft:wicket-menu (>=6.20.0.0, <=6.20.0.4), com.cooldatasoft:wicket-menu-demo (>=6.20.0.0, <=6.20.0.4) +324 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.20.0)

org.apache.wicket:wicket-core MAVEN version 6.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.20.0.0, =6.20.0.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0,...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.4) +285 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (>=9.0.0, <=9.2.0)

org.apache.wicket:wicket-core MAVEN version =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.2.1 and more Source cves: CVE-2021-23937 Source advis...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.24.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.24.0) +70 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.24.0)

org.apache.wicket:wicket-core MAVEN version 6.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.24.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.29.0, <=6.29.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.29.0, <=6.29.1) +67 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.29.0)

org.apache.wicket:wicket-core MAVEN version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29....