Malicious code in jquery-impromtu (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2568 Malicious code in jquery-ui-custom (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2567 Malicious code in jquery-impromtu (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in jquery-easing-original (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2566 Malicious code in jquery-easing-original (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in jquery-dragster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cf37295e01427e88bc1fd351c41960813a4b4a58c78b1ccd843bb5a46414dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-2565 Malicious code in jquery-dragster (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6cf37295e01427e88bc1fd351c41960813a4b4a58c78b1ccd843bb5a46414dbf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress jQuery T(-) Countdown Widget Plugin <= 2.3.25 is vulnerable to Cross Site Scripting (XSS)

Software jQuery T- Countdown Widget Type Plugin Vulnerable versions = 2.3.25 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37247 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8be8473580c0 Credits LVT-tholv2k Required privile...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2020-11022)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2020-11022 DESCRIPTION: jQuery is vulnerable to cross-site scripting,...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2019-11358)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2019-11358 DESCRIPTION: jQuery, as used in Drupal core, is vulnerable to...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2020-11023)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2020-11023 DESCRIPTION: jQuery is vulnerable to cross-site scripting,...

Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a remote attacker (CVE-2019-11358)

Summary There is a vulnerability in jQuery used by IBM Decision Optimization for IBM Cloud Pak for Data. IBM Decision Optimization for IBM Cloud Pak for Data has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2020-23064 DESCRIPTION: jQuery is vulnerable to cross-site scripting,...

AZL-43600 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

AZL-45066 CVE-2024-37890 affecting package js-jquery 3.5.0-4

ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in [email protected] e55e510 and backported to [email protected] 22c2876, [email protected] eeb76d3, and [email protected]...

OPENSUSE-SU-2024:10512-1 ruby2.2-rubygem-jquery-rails-4.2.1-1.1 on GA media

These are all security issues fixed in the ruby2.2-rubygem-jquery-rails-4.2.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11334-1 ruby2.7-rubygem-jquery-rails-4.4.0-1.7 on GA media

These are all security issues fixed in the ruby2.7-rubygem-jquery-rails-4.4.0-1.7 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13159-1 ruby3.2-rubygem-jquery-rails-4.5.1-1.3 on GA media

These are all security issues fixed in the ruby3.2-rubygem-jquery-rails-4.5.1-1.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12144-1 ruby3.1-rubygem-jquery-rails-4.5.0-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-jquery-rails-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-5425

The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2024-5425

The WP jQuery Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ attribute in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...