swagger-ui-browserify (>=2.1.4-a, <=2.2.3) potentially affected by CVE-2021-20086 via jquery-bbq (1.0.0)

jquery-bbq NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery-bbq and may be impacted: - swagger-ui-browserify =2.1.4-a, =2.2.3 Source cves: CVE-2021-20086 Source advisory: OSV:GHSA-7W8J-85WM-6XFQ...

Prototype Pollution in jquery-bbq

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...

GHSA-7W8J-85WM-6XFQ Prototype Pollution in jquery-bbq

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...

swagger-ui-browserify (>=2.1.4-a, <=2.2.3) potentially affected by CVE-2021-20086 via jquery-bbq (1.0.0)

jquery-bbq NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery-bbq and may be impacted: - swagger-ui-browserify =2.1.4-a, =2.2.3 Source cves: CVE-2021-20086 Source advisory: GHSA-7W8J-85WM-6XFQ...

jQuery UI XSS

The vulnerability of the jQuery UI library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

CentOS 8 : idm:DL1 and idm:client (CESA-2021:1846)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1846 advisory. - jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Note that Nessus has not tested for this issue but has...

jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

A flaw was found in jQuery. HTML containing \ elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

idm:DL1 and idm:client security, bug fix, and enhancement update

An update is available for ipa, python-jwcrypto, custodia, bind-dyndb-ldap, python-qrcode, softhsm, python-yubico, python-kdcproxy, opendnssec, ipa-healthcheck, pyusb. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

BSA-2020-973

Security Advisory ID : BSA-2020-973 Component : jQuery Revision : 1.0 In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e..html, .append, and others...

BSA-2020-972

Security Advisory ID : BSA-2020-972 Component : jQuery Revision : 1.0 In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untruste...

WS-2021-0096

Prototype pollution vulnerability in jquery-extend versions 1.10.2 through 2.0.3 allows an attacker to cause a denial of service and may lead to remote code execution...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (9.0.0-m4), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (9.0.0-m4) +262 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m4)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 9.0.0-m4 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.26.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.26.0) +249 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.26.0)

org.apache.wicket:wicket-core MAVEN version 6.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.26.0 -...

at.molindo:molindo-wicket-utils (2.0.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui (1.5.11) +36 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.11)

org.apache.wicket:wicket-core MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 1.5.11 -...

at.molindo:molindo-wicket-utils (2.0.0-alpha-1), com.googlecode.wicked-charts:wicked-charts-wicket15 (1.5.0) +49 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.10)

org.apache.wicket:wicket-core MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0-alpha-1 - com.googlecode.wicked-charts:wicked-charts-wicket15...

at.molindo:molindo-wicket-utils (3.0.0), com.cooldatasoft:wicket-menu (>=6.14.0.0, <=6.14.0.4) +233 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.14.0)

org.apache.wicket:wicket-core MAVEN version 6.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 3.0.0 - com.cooldatasoft:wicket-menu =6.14.0.0, =6.14.0.0, =6.14.0,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.24.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.24.0) +70 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.24.0)

org.apache.wicket:wicket-core MAVEN version 6.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.24.0 -...

com.cooldatasoft:wicket-menu (>=6.10.0, <=6.10.0.4), com.cooldatasoft:wicket-menu-demo (>=6.10.0.0, <=6.10.0.4) +221 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.10.0)

org.apache.wicket:wicket-core MAVEN version 6.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.10.0, =6.10.0.0, =0.2, =0.0.2, =0.1.0, =0.1.0, =3.5, =3.5, =3.9 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (9.0.0-m2), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (9.0.0-m2) +259 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m2)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 9.0.0-m2 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.25.0, <=6.25.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.25.0, <=6.25.1) +287 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.25.0)

org.apache.wicket:wicket-core MAVEN version 6.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25....