2496 matches found
Low: Red Hat Security Advisory: python-XStatic-jquery-ui security update
An update for python-XStatic-jquery-ui is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
jquery-ui: cross-site scripting in dialog closeText
It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user...
Cross-site Scripting (XSS)
jquery-migrate is vulnerable to Cross-site Scripting XSS. jquery-migrate uses code similar to $location.hash to select an ID value encoded on the page. However, an attacker can create a cross-site scripting injection by using a string similar to and run code to steal user data...
Cross-site Scripting (XSS)
jquery-mobile is vulnerable to Cross-site Scripting XSS. The vulnerability exists because it decodes the username:password of location.href in the url without encoding them first...
Fedora 24 : js-jquery (2016-8516b7d6fb)
Update to 2.2.4 with backport for XSS vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Fedora Update for js-jquery FEDORA-2016-8516b7d6fb
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: js-jquery1-1.12.4-2.fc25
jQuery is a fast, small, and feature-rich JavaScript library. It makes thin gs like HTML document traversal and manipulation, event handling, animation, a nd Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility,...
Fedora 25 : js-jquery (2016-3368a38282)
Update to 2.2.4 with backport for XSS vulnerability. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issue...
Fedora Update for js-jquery FEDORA-2016-3368a38282
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 25 Update: js-jquery-2.2.4-1.fc25
jQuery is a fast, small, and feature-rich JavaScript library. It makes thin gs like HTML document traversal and manipulation, event handling, animation, a nd Ajax much simpler with an easy-to-use API that works across a multitude of browsers. With a combination of versatility and extensibility,...
Low: Red Hat Security Advisory: python-XStatic-jquery-ui security update
An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
jquery-ui: cross-site scripting in dialog closeText
It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user...
Low: Red Hat Security Advisory: python-XStatic-jquery-ui security update
An update for python-XStatic-jquery-ui is now available for Red Hat OpenStack Platform 9.0 Mitaka. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...
jquery-ui: cross-site scripting in dialog closeText
It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user...
chatNow v1.1 - SQL Injection Web Vulnerability
Document Title: =============== chatNow v1.1 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2013 Source: https://github.com/thiagosf/chatNow Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID:...
chatNow v1.1 - SQL Injection Web Vulnerability
Document Title: =============== chatNow v1.1 - SQL Injection Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2013 Source: https://github.com/thiagosf/chatNow Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID:...
Alienvault OSSIM/USM 5.3.1 Persistent Cross Site Scripting
Details ======= Product: Alienvault OSSIM/USM Vulnerability: Stored XSS Author: Peter Lapp, lappsec gmail com CVE: CVE-2016-8581 CVSS: 3.5 Vulnerable Versions: Current Sessions. POC === The POC uses jQuery to send all session IDs on the "Current Sessions" page to an arbitrary site Google, in this...
BoxBilling 4.20 Cross Site Scripting
======================================================================== | Title : BoxBilling 4.20 cross site scripting Exploits | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 4.20 | Vendor :...
jQuery Image Upload Vulnerability
jQuery is an American programmer John Resig developed a set of open source, cross-browser JavaScript library . There is a security vulnerability in jQuery. Since jQuery's jqueryuploadcrop fails to restrict the format of uploaded images, an attacker can exploit this vulnerability to upload specifi...
BuilderEngine Arbitrary File Upload Vulnerability and execution
This module exploits a vulnerability found in BuilderEngine 3.5.0 via elFinder 2.0. The jquery-file-upload plugin can be abused to upload a malicious file, which would result in arbitrary remote code execution under the context of the web server. Module Options msf use...