com.googlecode.wicket-charts:wicket-charts (>=1.0.0, <=1.2.0), com.googlecode.wicket-jquery-ui:jquery-ui-core (>=1.0, <=1.1) +201 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.5)

org.apache.wicket:wicket-core MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-charts:wicket-charts =1.0.0, =1.0, =1.1 - org.apache.wicket:wicket 1.5.5 -...

com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel (>=1.2.0, <=1.3.0), com.danhaywood.isis.wicket:danhaywood-isis-wicket-fullcalendar (1.2.0) +238 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.7.0)

org.apache.wicket:wicket-core MAVEN version 6.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.danhaywood.isis.wicket:danhaywood-isis-wicket-excel =1.2.0, =1.2.0, =1.2.1 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.27.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.27.0) +68 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.27.0)

org.apache.wicket:wicket-core MAVEN version 6.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.27.0 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (6.23.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (6.23.0) +247 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.23.0)

org.apache.wicket:wicket-core MAVEN version 6.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 6.23.0 -...

com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 (>=1.0.1, <=1.0.2), com.googlecode.wicket-jquery-ui:jquery-ui-calendar (>=1.4.0, <=1.4.1) +220 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.9)

org.apache.wicket:wicket-core MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-continuous-calendar:wicket-continuous-calendar-wicket15 =1.0.1, =1.4.0, =1.4.0,...

at.molindo:molindo-wicket-utils (2.0.0), com.googlecode.wicket-jquery-ui:wicket-jquery-ui (1.5.11) +36 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (1.5.11)

org.apache.wicket:wicket-core MAVEN version 1.5.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - at.molindo:molindo-wicket-utils 2.0.0 - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 1.5.11 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (9.0.0-m2), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (9.0.0-m2) +259 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m2)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 9.0.0-m2 -...

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (>=6.28.0, <=6.28.1), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (>=6.28.0, <=6.28.1) +241 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (6.28.0)

org.apache.wicket:wicket-core MAVEN version 6.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28.0, =6.28....

com.googlecode.wicket-jquery-ui:wicket-jquery-ui (9.0.0-m4), com.googlecode.wicket-jquery-ui:wicket-jquery-ui-calendar (9.0.0-m4) +262 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m4)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.googlecode.wicket-jquery-ui:wicket-jquery-ui 9.0.0-m4 -...

PT-2021-7968

Name of the Vulnerable Software and Affected Versions jQuery UI versions prior to 1.13.0 Description The issue is related to the .position util in jQuery UI, where accepting the value of the of option from untrusted sources may execute untrusted code. Any string value passed to the of option is n...

jQuery UI 1.12.1 - Denial of Service Exploit

Exploit Title: jQuery UI 1.12.1 - Denial of Service DoS Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://jqueryui.com/ Software Link: https://jqueryui.com/download/ Version: DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function exploit for var i = 0...

jQuery UI 1.12.1 - Denial of Service (DoS)

Exploit Title: jQuery UI 1.12.1 - Denial of Service DoS Date: 20 Jan, 2021 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://jqueryui.com/ Software Link: https://jqueryui.com/download/ Version: DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC by Rafael Cintra Lopes function...

Exploit for CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Ex...

PT-2021-11548

Name of the Vulnerable Software and Affected Versions: jquery-ui versions all org.fujion.webjars:jquery-ui versions all Description: The issue occurs when the "dialog" is injected into an HTML tag more than once, potentially causing the browser and the application to crash. Recommendations: For...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (3.0.3-rc), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (3.0.3-rc) +270 more potentially affected by CVE-2020-11976 via org.apache.wicket:wicket-core (9.0.0-m5)

org.apache.wicket:wicket-core MAVEN version 9.0.0-m5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.wicket:wicket-core and may be impacted: - com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context 3.0.3-rc -...

Fedora Update for rubygem-jquery-ui-rails FEDORA-2019-a96124345a

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 30 Update: rubygem-jquery-ui-rails-6.0.1-1.fc30

jQuery UI's JavaScript, CSS, and image files packaged for the Rails 3.1+ as set pipeline...

jQuery UI < 1.10.0 Multiple Vulnerabilities

According to its self-reported version number, jQuery UI is prior to 1.10.0. Therefore, it may be affected by multiple vulnerabilities : - Cross-Site Scripting XSSS due to improper escaping of the tooltip title attribute. - Cross-Site Scripting XSS due to improper escaping of the title option in...

Cross-site Scripting (XSS) Via Dialog CloseText

jquery-ui is vulnerable to cross-site scripting XSS attacks. A malicious user can execute arbitrary code to the closeText parameter of the dialog function...

Cross-site Scripting (XSS)

jquery-ui is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary script via the dialog due to a lack of sanitization...