Lucene search
+L

315 matches found

Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•169 views

Cross-site Scripting in jquery-ui

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

6.1CVSS4.2AI score0.18351EPSS
SaveExploits1References27Affected Software4
OSV
OSV
•added 2017/10/24 6:33 p.m.•90 views

GHSA-WCM2-9C89-WMFM Cross-site Scripting in jquery-ui

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

6.1CVSS6.2AI score0.18351EPSS
SaveExploits1References27
OSV
OSV
•added 2017/10/24 6:33 p.m.•79 views

GHSA-QQXP-XP9V-VVX6 jquery-ui Tooltip widget vulnerable to XSS

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS5.9AI score0.06463EPSS
SaveExploits0References13
Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•115 views

jquery-ui Tooltip widget vulnerable to XSS

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS5.7AI score0.06463EPSS
SaveExploits0References13Affected Software4
Github Security Blog
Github Security Blog
•added 2017/10/24 6:33 p.m.•821 views

jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

Affected versions of jquery-ui are vulnerable to a cross-site scripting vulnerability when arbitrary user input is supplied as the value of the closeText parameter in the dialog function. jQuery-UI is a library for manipulating UI elements via jQuery. Version 1.11.4 has a cross site scripting XSS...

6.1CVSS3.4AI score0.2258EPSS
SaveExploits1References39Affected Software4
OSV
OSV
•added 2017/10/24 6:33 p.m.•217 views

GHSA-HPCF-8VF9-Q4GJ jQuery-UI vulnerable to Cross-site Scripting in dialog closeText

Affected versions of jquery-ui are vulnerable to a cross-site scripting vulnerability when arbitrary user input is supplied as the value of the closeText parameter in the dialog function. jQuery-UI is a library for manipulating UI elements via jQuery. Version 1.11.4 has a cross site scripting XSS...

6.1CVSS6.2AI score0.2258EPSS
SaveExploits1References39
vulnersOsv
vulnersOsv
•added 2017/10/24 6:33 p.m.•7 views

@mlnmln/test-component (>=0.0.0, <=0.0.1), algoliasearch-extensions-bundle (>=1.2.1, <=4.3.9) +56 more potentially affected by CVE-2016-7103 via jquery-ui (>=1.10.4, <=1.10.5)

jquery-ui NPM version =1.10.4, =0.0.0, =1.2.1, =0.0.7-g, =0.0.1-a, =1.0.2, =0.10.1, =0.12.1, =0.1.1, =0.3.0, =0.0.1, =0.0.5, =0.0.3, =0.0.4 and more Source cves: CVE-2016-7103 Source advisory: OSV:GHSA-HPCF-8VF9-Q4GJ...

6.1CVSS6.9AI score0.2258EPSS
SaveExploits1
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•45 views

Cross-site Scripting in jquery-ui

Cross-site scripting XSS vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option...

6.1CVSS6AI score0.18351EPSS
SaveExploits1References1Affected Software1
RubySec
RubySec
•added 2017/10/24 12:00 a.m.•53 views

Moderate severity vulnerability that affects jquery-ui

Cross-site scripting XSS vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title attribute, which is not properly handled in the autocomplete combo box demo...

4.3CVSS6.1AI score0.06463EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/09/05 12:41 p.m.•25 views

SUSE-SU-2017:2351-1 Security update for python-XStatic-jquery-ui

This update for python-XStatic-jquery-ui fixes the following issues: - CVE-2016-7103: possible cross-site scripting in dialog closeText could lead to arbitrary code injection bsc996004...

6.1CVSS6.3AI score0.2258EPSS
SaveExploits1References3
CNVD
CNVD
•added 2017/03/17 12:00 a.m.•21 views

jQuery UI Cross-Site Scripting Vulnerability

jQuery UI is a set of JavaScript libraries developed by the jQuery team that provides abstracted, themeable GUI controls and animations, and supports the construction of interactive Internet applications. A cross-site scripting vulnerability exists in jQuery UI versions prior to 1.12.0. A remote...

6.1CVSS8.1AI score0.2258EPSS
SaveExploits1References1
OSV
OSV
•added 2017/03/15 4:59 p.m.•13 views

UBUNTU-CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS7AI score0.2258EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
•added 2017/03/15 4:59 p.m.•48 views

CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS7AI score0.2258EPSS
SaveExploits1References6
Prion
Prion
•added 2017/03/15 4:59 p.m.•34 views

Cross site scripting

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

4.3CVSS6AI score0.2258EPSS
SaveExploits1References28Affected Software12
OSV
OSV
•added 2017/03/15 4:59 p.m.•9 views

DEBIAN-CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS6.5AI score0.2258EPSS
SaveExploits1References1
NVD
NVD
•added 2017/03/15 4:59 p.m.•27 views

CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS6.1AI score0.2258EPSS
SaveExploits1References28
Debian CVE
Debian CVE
•added 2017/03/15 12:00 a.m.•74 views

CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS7.5AI score0.2258EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2017/03/15 12:00 a.m.•10 views

PT-2017-4095 · Jquery +5 · Jquery Ui +5

Name of the Vulnerable Software and Affected Versions: jQuery UI versions prior to 1.12.0 Description: The issue is related to a cross-site scripting XSS vulnerability in jQuery UI. This vulnerability might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter ...

6.5CVSS6.1AI score0.40768EPSS
SaveExploits7References92
AlpineLinux
AlpineLinux
•added 2017/03/15 12:00 a.m.•135 views

CVE-2016-7103

Cross-site scripting XSS vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function...

6.1CVSS6.3AI score0.2258EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2017/01/27 12:00 a.m.•79 views

Tenable SecurityCenter < 5.4.1 Multiple Vulnerabilities (TNS-2016-19)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is prior to 5.4.1. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in x509vfy.c due to improper handling of certificate revocation lists...

9.8CVSS8.2AI score0.30216EPSS
SaveExploits20References20
Rows per page
Query Builder