com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.cantaa:cantaa-commons (1.1), com.cooldatasoft:wicket-menu (>=6.16.0.0, <=6.16.0.4) +243 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.16.0)

org.apache.wicket:wicket-core MAVEN version 6.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cantaa:cantaa-commons 1.1 - com.cooldatasoft:wicket-menu =6.16.0.0, =6.16.0.0, =1.0.0, =0.9.4,...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.29.0, <=6.29.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.29.0, <=6.29.1) +67 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.29.0)

org.apache.wicket:wicket-core MAVEN version 6.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29.0, =6.29....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.26.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.26.0) +249 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.26.0)

org.apache.wicket:wicket-core MAVEN version 6.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.26.0 -...

at.molindo:molindo-wicket-utils (2.0.0-alpha-1), com.googlecode.wicked-charts:wicked-charts-wicket15 (1.5.0) +49 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (1.5.10)

org.apache.wicket:wicket-core MAVEN version 1.5.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0-alpha-1 - com.googlecode.wicked-charts:wicked-charts-wicket15...

com.cooldatasoft:wicket-menu (>=6.20.0.0, <=6.20.0.4), com.cooldatasoft:wicket-menu-demo (>=6.20.0.0, <=6.20.0.4) +324 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.20.0)

org.apache.wicket:wicket-core MAVEN version 6.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.cooldatasoft:wicket-menu =6.20.0.0, =6.20.0.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0, =6.20.0,...

com.github.wicket-acc:wicket-autowire (1.0.0), com.googlecode.wicked-charts:wicked-charts-wicket6 (>=2.0.0, <=2.0.1) +279 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.21.0)

org.apache.wicket:wicket-core MAVEN version 6.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.github.wicket-acc:wicket-autowire 1.0.0 - com.googlecode.wicked-charts:wicked-charts-wicket6...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.27.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.27.0) +68 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.27.0)

org.apache.wicket:wicket-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.27.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.25.0, <=6.25.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.25.0, <=6.25.1) +287 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.25.0)

org.apache.wicket:wicket-core MAVEN version 6.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25.0, =6.25....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.24.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.24.0) +70 more potentially affected by CVE-2021-23937 via org.apache.wicket:wicket-core (6.24.0)

org.apache.wicket:wicket-core MAVEN version 6.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.24.0 -...

SUSE-SU-2022:1729-1 Security update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud

This update for ardana-barbican, grafana, openstack-barbican, openstack-cinder, openstack-heat-gbp, openstack-horizon-plugin-gbp-ui, openstack-ironic, openstack-keystone, openstack-neutron-gbp, python-lxml, release-notes-suse-openstack-cloud fixes the following issues: Security fixes included on...

Cross-site Scripting in wicket-jquery-ui

In wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...

GHSA-PJV3-RH6V-2PJ8 Cross-site Scripting in wicket-jquery-ui

In wicket-jquery-ui = 6.29.0, = 7.10.1, = 8.0.0-M9.1, JS code created in WYSIWYG editor will be executed on display...

GHSA-PWPC-HQQ2-HX2X Cross-site Scripting in wicket-jquery-ui

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor...

Cross-site Scripting in wicket-jquery-ui

In Wicket jQuery UI 6.28.0 and earlier, 7.9.1 and earlier, and 8.0.0-M8 and earlier, a security issue has been discovered in the WYSIWYG editor that allows an attacker to submit arbitrary JS code to WYSIWYG editor...

[R1] Tenable.sc 5.21.0 Fixes Multiple Third-Party Vulnerabilities

R1 Tenable.sc 5.21.0 Fixes Multiple Third-Party Vulnerabilities Arnie Cabral Tue, 04/19/2022 - 10:32 Tenable.sc leverages third-party software to help provide underlying functionality. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made...

jQuery UI Datepicker Widget Cross Site Scripting (CVE-2021-41182; CVE-2021-41183)

A cross site scripting vulnerability exists in the jQuery UI Datepicker widget. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Security Bulletin: IBM Security QRadar SOAR is using a component vulnerable to Cross Site Scripting (CVE-2021-41182, CVE-2021-41183, CVE-2021-41184)

Summary IBM® Security QRadar SOAR formerly known as Resilient SOAR is using a component with known Cross Site Scripting vulnerabilities. QRadar SOAR uses jQuery-UI, which is vulnerable to several XSS issues as listed below. QRadar SOAR has released an update that addresses these issues...

Oracle Linux 7 : jquery-ui (ELSA-2022-9177)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-9177 advisory. - Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 Orabug: 33869588 Tenable has extracted the preceding description...

jquery-ui security update

1.10.4.custom-4.0.1 - Backport jQuery CVE-2020-11022 and CVE-2020-11023 fixes to bundled jQuery v1.10.2 Orabug: 33869588 1.10.4.custom-4 - removed %%defattr from specfile - removed Group from specfile - removed BuildRoot from specfiles Tue May 10 2016 Grant Gainey 1.10.4.custom-3 - jquery-ui: bui...