CVE-2021-20084

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...

Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype...

Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...

CVE-2021-20086

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20086

CVE-2021-20086 affects jquery-bbq 1.2.1 and involves prototype pollution through improper modification of Object.prototype. The published materials describe that an attacker could inject properties into Object.prototype, enabling manipulation of application behavior. IBM and related sources link ...

CVE-2021-20087

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20087

The CVE-2021-20087 entry concerns jquery-deparam 0.5.1, where an improper control over Object.prototype attributes enables prototype pollution (injecting properties into Object.prototype). The vulnerability is caused by modifying prototype objects in a way that affects all objects created afterwa...

CVE-2021-20084

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype...

CVE-2021-20084

CVE-2021-20084 affects jquery-sparkle version 1.5.2-beta, where an improperly controlled modification of Object.prototype leads to prototype pollution. The root cause is injection of properties into Object.prototype, enabling manipulation of derived objects and potential downstream impact. CVSS m...

AZL-45213 CVE-2021-31597 affecting package js-jquery 3.5.0-4

The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized when the property exists but is undefined is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected...

jquery-bbq 安全漏洞

jquery-bbq is an application. jQuery BBQ enables simple but powerful hash history via the cross-browser window.onhashchange event. A security vulnerability exists in jquery-bbq 1.2.1, which stems from an improperly controlled modification of the Object. prototype property that allows a malicious...

jquery-sparkle 安全漏洞

jquery-sparkle is an application. jQuery's "Don't Repeat Yourself" plugin/effects framework. A security vulnerability exists in jquery-sparkle 1.5.2-beta, which arises from an improperly controlled modification that allows a malicious user to inject properties into Object...

PT-2021-13764

Name of the Vulnerable Software and Affected Versions: jquery-bbq version 1.2.1 Description: The issue is related to improperly controlled modification of object prototype attributes, also known as 'Prototype Pollution'. This allows a malicious user to inject properties into Object.prototype...

PT-2021-13765 · Unknown · Jquery-Deparam

Name of the Vulnerable Software and Affected Versions: jquery-deparam version 0.5.1 Description: The issue allows a malicious user to inject properties into Object.prototype through 'Prototype Pollution'. This occurs due to improperly controlled modification of object prototype attributes in...

jquery-plugin-query-object 安全漏洞

jquery-plugin-query-object is an application. It is used for query string modification and creation in jQuery. A security vulnerability exists in jquery-plugin-query-object 2.2.3, which stems from an improperly controlled modification of the object prototype property that allows a malicious user ...

PT-2021-13762 · Unknown · Jquery-Sparkle

Name of the Vulnerable Software and Affected Versions: jquery-sparkle version 1.5.2-beta Description: The issue is related to 'Prototype Pollution' in the jquery-sparkle library, allowing a malicious user to inject properties into Object.prototype. Recommendations: For jquery-sparkle version...

jquery-deparam 安全漏洞

jquery-deparam is a software application. Extracts $ .deparam from Ben Alman's jquery-bbq and includes license information. A security vulnerability exists in jquery-deparam 0.5.1, which stems from an improperly controlled modification of object prototype properties that allows a malicious user t...

Amazon Linux 2 : ipa (ALAS-2021-1626)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1626 advisory. A flaw was found in jQuery. HTML containingelements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest...

Medium: ipa

Issue Overview: A flaw was found in jQuery. HTML containing elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity...

jQuery 1.2 Cross Site Scripting

Exploit Title: jQuery 1.2 - Cross-Site Scripting XSS Date: 04/29/2020 Exploit Author: Central InfoSec Version: jQuery versions greater than or equal to 1.2 and before 3.5.0 CVE : CVE-2020-11022 Proof of Concept 1:...