CVE-2024-30875

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, a...

jQuery UI 安全漏洞

jQuery UI is a jQuery open source set of carefully curated user interface interactions, effects, widgets and themes built on jQuery. A security vulnerability exists in jQuery UI version v.1.13.1, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to...

Unspecified Vulnerability in Google Chrome (CNVD-2024-41034)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 130.0.6723.58, which stems from the presence of post-release reuse, and can be exploited by a remote attacker to convince a user to perform a specific UI gesture,...

CVE-2024-30875

Cross Site Scripting vulnerability in JavaScript Library jquery-ui v.1.13.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the window.addEventListener component. NOTE: this is disputed by the Supplier because it cannot be reproduced, a...

Microsoft Edge (Chromium) < 130.0.2849.46 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 130.0.2849.46. It is, therefore, affected by multiple vulnerabilities as referenced in the October 17, 2024 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2024-43566, CVE-2024-43578,...

Unspecified Vulnerability in Google Chrome (CNVD-2024-44485)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted Chrome extension...

Unspecified Vulnerability in Google Chrome (CNVD-2024-44484)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted HTML page...

Unspecified Vulnerability in Google Chrome (CNVD-2024-44483)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted HTML page...

CVE-2024-45071

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-45071 IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-45071 IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-45071

CVE-2024-45071 affects IBM WebSphere Application Server 8.5 and 9.0 and is a stored cross-site scripting vulnerability. A privileged user can embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Several IBM security bulletins link to th...

Malicious code in ui-datepicker-week-end (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9890 Malicious code in ui-datepicker-week-end (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9860 Malicious code in soc-react-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in soc-react-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9753 Malicious code in payouts-link-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in confluence-search-ui (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-32251

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66 Description An inappropriate implementation in permissions within Google Chrome allows a remote attacker to perform UI spoofing through a specially crafted HTML page. The security severity is rated...

CVE-2024-9957

Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...