com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.27.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.27.0) +68 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.27.0)

org.apache.wicket:wicket-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.27.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.googlecode.wicket-charts:wicket-charts (>=1.0.0, <=1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-core (>=1.0, <=1.1) +201 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.5)

org.apache.wicket:wicket-core MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-charts:wicket-charts =1.0.0, =1.0, =1.1 - org.apache.wicket:wicket 1.5.5 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.22.1, <=6.22.2), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.22.1, <=6.22.2) +275 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.22.0)

org.apache.wicket:wicket-core MAVEN version 6.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.22.1, =6.22.1, =6.22.1, =6.22.1, =6.22.1, =6.22....

com.cooldatasoft:wicket-menu (>=6.18.0.0, <=6.18.0.4), com.cooldatasoft:wicket-menu-demo (>=6.18.0.0, <=6.18.0.4) +310 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.18.0)

org.apache.wicket:wicket-core MAVEN version 6.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.18.0.0, =6.18.0.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0, =6.18.0,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.29.0, <=6.29.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.29.0, <=6.29.1) +67 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.29.0)

org.apache.wicket:wicket-core MAVEN version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29....

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...

com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel (>=1.2.0, <=1.3.0), com.danhaywood.isis.wicket:danhaywood-isis-wicket-fullcalendar (1.2.0) +238 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.7.0)

org.apache.wicket:wicket-core MAVEN version 6.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel =1.2.0, =1.2.0, =1.2.1 -...

Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. Vulnerability Details CVEID: CVE-2015-5237 DESCRIPTION: Google Protocol Buffers could allow a remote attacker to execute arbitrary code on the system, caused by ...

PT-2021-7968

Name of the Vulnerable Software and Affected Versions jQuery UI versions prior to 1.13.0 Description The issue is related to the .position util in jQuery UI, where accepting the value of the of option from untrusted sources may execute untrusted code. Any string value passed to the of option is n...

Huawei EulerOS: Security Advisory for pki-core (EulerOS-SA-2021-1831)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : pki-core (EulerOS-SA-2021-1831)

According to the versions of the pki-core packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate ov...

Prototype Pollution

jquery-bbq is vulnerable to prototype pollution. An attacker is able to inject malicious properties into existing construct prototypes Object.prototype and modify attributes such as proto, constructor and prototype...

Prototype Pollution

jquery-plugin-query-object is vulnerable to prototype pollution. An attacker is able to inject malicious properties into existing construct prototypes Object.prototype and modify attributes such as proto, constructor and prototype...

Prototype Pollution

jquery-deparam is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

CVE-2021-20086

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20086

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20083

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20083

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype...