Lucene search
+L

3178 matches found

vulnersOsv
vulnersOsv
•added 2020/04/29 10:19 p.m.•7 views

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6503 more potentially affected by CVE-2020-11023 via jquery (>=1.5.1, <=3.4.1)

jquery NPM version =1.5.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.2.0 - 4.yarntest 1.0.3 - 4design 0.0.1 and more Source cves: CVE-2020-11023 Source advisory: OSV:GHSA-JPCQ-CGW6-V4J6...

6.9CVSS6.6AI score0.84887EPSS
SaveExploits7
osv_ghsa
osv_ghsa
•added 2020/04/29 10:18 p.m.•1795 views

GHSA-GXR4-XJJ5-5PX2 Potential XSS vulnerability in jQuery

Impact Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. Patches This problem is patched in jQuery 3.5.0. Workarounds To workaround the issue without upgrading, adding the...

6.9CVSS6.5AI score0.99215EPSS
SaveExploits8References50
vulnersOsv
vulnersOsv
•added 2020/04/29 10:18 p.m.•9 views

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6038 more potentially affected by CVE-2020-11022 via jquery (>=1.12.0, <=3.4.1)

jquery NPM version =1.12.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.3.0, =1.0.0, =4.13.7-rc4, =1.0.0-beta.4, =2.83.0 and more Source cves: CVE-2020-11022 Source advisory: OSV:GHSA-GXR4-XJJ5-5PX2...

6.9CVSS6.6AI score0.99215EPSS
SaveExploits8
vulnersOsv
vulnersOsv
•added 2020/04/29 10:18 p.m.•5 views

000demo (>=1.0.0, <=1.1.0), 03-npm-abc (>=1.0.0, <=1.1.0) +6038 more potentially affected by CVE-2020-11022 via jquery (>=1.12.0, <=3.4.1)

jquery NPM version =1.12.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.0.1, =0.2.1, =0.1.75, =0.3.0, =1.0.0, =4.13.7-rc4, =1.0.0-beta.4, =2.83.0 and more Source cves: CVE-2020-11022 Source advisory: GHSA-GXR4-XJJ5-5PX2...

6.9CVSS0.99215EPSS
SaveExploits8
Github Security Blog
Github Security Blog
•added 2020/04/29 10:18 p.m.•3266 views

Potential XSS vulnerability in jQuery

Impact Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. Patches This problem is patched in jQuery 3.5.0. Workarounds To workaround the issue without upgrading, adding the...

6.9CVSS6.5AI score0.99215EPSS
SaveExploits8References50Affected Software6
osv_alpine
osv_alpine
•added 2020/04/29 10:15 p.m.•5 views

ALPINE-CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.1CVSS0.99215EPSS
SaveExploits8References1
osv_debian
osv_debian
•added 2020/04/29 10:15 p.m.•13 views

DEBIAN-CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.1CVSS6.7AI score0.99215EPSS
SaveExploits8References1
NVD
NVD
•added 2020/04/29 10:15 p.m.•41 views

CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS7.2AI score0.99215EPSS
SaveExploits8References71
osv_cve
osv_cve
•added 2020/04/29 10:15 p.m.•49 views

CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.1CVSS6.8AI score
SaveExploits0References71
osv_ubuntu
osv_ubuntu
•added 2020/04/29 10:15 p.m.•18 views

UBUNTU-CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.7AI score0.99215EPSS
SaveExploits8References8
Prion
Prion
•added 2020/04/29 10:15 p.m.•136 views

Code injection

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

4.3CVSS7.5AI score0.99215EPSS
SaveExploits8References43Affected Software57
UbuntuCve
UbuntuCve
•added 2020/04/29 10:15 p.m.•125 views

CVE-2020-11022

In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.7AI score0.99215EPSS
SaveExploits8References7
osv_debian
osv_debian
•added 2020/04/29 9:15 p.m.•8 views

DEBIAN-CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.6AI score0.84887EPSS
SaveExploits7References1
osv_alpine
osv_alpine
•added 2020/04/29 9:15 p.m.•4 views

ALPINE-CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.1CVSS0.84887EPSS
SaveExploits7References1
NVD
NVD
•added 2020/04/29 9:15 p.m.•60 views

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS7.2AI score0.84887EPSS
SaveExploits7References67
osv_cve
osv_cve
•added 2020/04/29 9:15 p.m.•64 views

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.1CVSS6.4AI score0.84887EPSS
SaveExploits7References67
osv_ubuntu
osv_ubuntu
•added 2020/04/29 9:15 p.m.•17 views

UBUNTU-CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.6AI score0.84887EPSS
SaveExploits7References8
Prion
Prion
•added 2020/04/29 9:15 p.m.•76 views

Code injection

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

4.3CVSS7.1AI score0.84887EPSS
SaveExploits7References65Affected Software35
UbuntuCve
UbuntuCve
•added 2020/04/29 9:15 p.m.•135 views

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS6.6AI score0.84887EPSS
SaveExploits7References7
attackerkb
attackerkb
•added 2020/04/29 12:00 a.m.•148 views

CVE-2020-11022

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources – even after sanitizing it – to one of jQuery’s DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0. Recent assessments:...

6.9CVSS6.7AI score0.99215EPSS
SaveIn wildExploits12References52
Rows per page
Query Builder